<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20095</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:54:41"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  * kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  * kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  * kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  * kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  * kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  * kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  * kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  * kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  * kernel: io_uring/sqpoll: zero sqd-&gt;thread on tctx errors (CVE-2025-21633)
  * kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  * kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  * kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  * kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  * kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  * kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  * kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  * kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  * kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  * kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  * kernel: pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0 (CVE-2025-21702)
  * kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  * kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  * kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  * kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  * kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  * kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  * kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  * kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  * kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  * kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  * kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  * kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  * kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  * kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  * kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  * kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  * kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  * kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  * kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  * kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  * kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  * kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  * kernel: HID: multitouch: Add NULL check in mt_input_configured (CVE-2024-58020)
  * kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (CVE-2024-57984)
  * kernel: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (CVE-2025-21761)
  * kernel: sched_ext: Fix incorrect autogroup migration detection (CVE-2025-21771)
  * kernel: usb: xhci: Fix NULL pointer dereference on certain command aborts (CVE-2024-57981)
  * kernel: memcg: fix soft lockup in the OOM process (CVE-2024-57977)
  * kernel: vxlan: check vxlan_vnigroup_init() return value (CVE-2025-21790)
  * kernel: usbnet: ipheth: fix DPE OoB read (CVE-2025-21741)
  * kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)
  * kernel: ipv6: use RCU protection in ip6_default_advmss() (CVE-2025-21765)
  * kernel: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (CVE-2024-58006)
  * kernel: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (CVE-2024-58012)
  * kernel: wifi: brcmfmac: Check the return value of of_property_read_string_index() (CVE-2025-21750)
  * kernel: wifi: rtlwifi: remove unused check_buddy_priv (CVE-2024-58072)
  * kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (CVE-2024-58069)
  * kernel: wifi: mac80211: prohibit deactivating all links (CVE-2024-58061)
  * kernel: idpf: convert workqueues to unbound (CVE-2024-58057)
  * kernel: wifi: mac80211: don't flush non-uploaded STAs (CVE-2025-21828)
  * kernel: netfilter: nf_tables: reject mismatching sum of field_len with set key length (CVE-2025-21826)
  * kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (CVE-2024-58077)
  * kernel: crypto: tegra - do not transfer req when tegra init fails (CVE-2024-58075)
  * kernel: io_uring/uring_cmd: unconditionally copy SQEs at prep time (CVE-2025-21837)
  * kernel: information leak via transient execution vulnerability in some AMD processors (CVE-2024-36350)
  * kernel: transient execution vulnerability in some AMD processors (CVE-2024-36357)
  * kernel: net/sched: cls_api: fix error handling causing NULL dereference (CVE-2025-21857)
  * kernel: bpf: Fix softlockup in arena_map_free on 64k page kernel (CVE-2025-21851)
  * kernel: ibmvnic: Don't reference skb after sending to VIOS (CVE-2025-21855)
  * kernel: smb: client: Add check for next_buffer in receive_encrypted_standard() (CVE-2025-21844)
  * kernel: bpf: avoid holding freeze_mutex during mmap operation (CVE-2025-21853)
  * kernel: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (CVE-2025-21847)
  * kernel: tcp: drop secpath at the same time as we currently drop dst (CVE-2025-21864)
  * kernel: bpf: Fix deadlock when freeing cgroup storage (CVE-2024-58088)
  * kernel: acct: perform last write from workqueue (CVE-2025-21846)
  * kernel: mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (CVE-2025-21861)
  * kernel: io_uring: prevent opcode speculation (CVE-2025-21863)
  * kernel: fbdev: hyperv_fb: Allow graceful removal of framebuffer (CVE-2025-21976)
  * kernel: netfilter: nft_tunnel: fix geneve_opt type confusion addition (CVE-2025-22056)
  * kernel: net: ppp: Add bound checking for skb data on ppp_sync_txmung (CVE-2025-37749)
  * microcode_ctl: From CVEorg collector (CVE-2024-28956)
  * kernel: usb: typec: ucsi: displayport: Fix NULL pointer access (CVE-2025-37994)
  * kernel: wifi: ath12k: fix uaf in ath12k_core_init() (CVE-2025-38116)
  * kernel: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (CVE-2025-38412)
  * kernel: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (CVE-2025-38369)
  * kernel: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (CVE-2025-38468)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20095" id="RHSA-2025:20095" type="rhsa" title="RHSA-2025:20095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28956" id="CVE-2024-28956" type="cve" title="CVE-2024-28956"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36350" id="CVE-2024-36350" type="cve" title="CVE-2024-36350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36357" id="CVE-2024-36357" type="cve" title="CVE-2024-36357"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49570" id="CVE-2024-49570" type="cve" title="CVE-2024-49570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52332" id="CVE-2024-52332" type="cve" title="CVE-2024-52332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53147" id="CVE-2024-53147" type="cve" title="CVE-2024-53147"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53216" id="CVE-2024-53216" type="cve" title="CVE-2024-53216"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53222" id="CVE-2024-53222" type="cve" title="CVE-2024-53222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53241" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-54456" id="CVE-2024-54456" type="cve" title="CVE-2024-54456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56662" id="CVE-2024-56662" type="cve" title="CVE-2024-56662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56675" id="CVE-2024-56675" type="cve" title="CVE-2024-56675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56690" id="CVE-2024-56690" type="cve" title="CVE-2024-56690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57901" id="CVE-2024-57901" type="cve" title="CVE-2024-57901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57902" id="CVE-2024-57902" type="cve" title="CVE-2024-57902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57941" id="CVE-2024-57941" type="cve" title="CVE-2024-57941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57942" id="CVE-2024-57942" type="cve" title="CVE-2024-57942"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57977" id="CVE-2024-57977" type="cve" title="CVE-2024-57977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57981" id="CVE-2024-57981" type="cve" title="CVE-2024-57981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57984" id="CVE-2024-57984" type="cve" title="CVE-2024-57984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57986" id="CVE-2024-57986" type="cve" title="CVE-2024-57986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57987" id="CVE-2024-57987" type="cve" title="CVE-2024-57987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57988" id="CVE-2024-57988" type="cve" title="CVE-2024-57988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57989" id="CVE-2024-57989" type="cve" title="CVE-2024-57989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57995" id="CVE-2024-57995" type="cve" title="CVE-2024-57995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58004" id="CVE-2024-58004" type="cve" title="CVE-2024-58004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58005" id="CVE-2024-58005" type="cve" title="CVE-2024-58005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58006" id="CVE-2024-58006" type="cve" title="CVE-2024-58006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58012" id="CVE-2024-58012" type="cve" title="CVE-2024-58012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58013" id="CVE-2024-58013" type="cve" title="CVE-2024-58013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58014" id="CVE-2024-58014" type="cve" title="CVE-2024-58014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58015" id="CVE-2024-58015" type="cve" title="CVE-2024-58015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58020" id="CVE-2024-58020" type="cve" title="CVE-2024-58020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58057" id="CVE-2024-58057" type="cve" title="CVE-2024-58057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58061" id="CVE-2024-58061" type="cve" title="CVE-2024-58061"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58069" id="CVE-2024-58069" type="cve" title="CVE-2024-58069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58072" id="CVE-2024-58072" type="cve" title="CVE-2024-58072"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58075" id="CVE-2024-58075" type="cve" title="CVE-2024-58075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58077" id="CVE-2024-58077" type="cve" title="CVE-2024-58077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58088" id="CVE-2024-58088" type="cve" title="CVE-2024-58088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21633" id="CVE-2025-21633" type="cve" title="CVE-2025-21633"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21647" id="CVE-2025-21647" type="cve" title="CVE-2025-21647"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21652" id="CVE-2025-21652" type="cve" title="CVE-2025-21652"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21655" id="CVE-2025-21655" type="cve" title="CVE-2025-21655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21671" id="CVE-2025-21671" type="cve" title="CVE-2025-21671"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21680" id="CVE-2025-21680" type="cve" title="CVE-2025-21680"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21691" id="CVE-2025-21691" type="cve" title="CVE-2025-21691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21693" id="CVE-2025-21693" type="cve" title="CVE-2025-21693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21696" id="CVE-2025-21696" type="cve" title="CVE-2025-21696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21702" id="CVE-2025-21702" type="cve" title="CVE-2025-21702"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21726" id="CVE-2025-21726" type="cve" title="CVE-2025-21726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21732" id="CVE-2025-21732" type="cve" title="CVE-2025-21732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21738" id="CVE-2025-21738" type="cve" title="CVE-2025-21738"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21741" id="CVE-2025-21741" type="cve" title="CVE-2025-21741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21742" id="CVE-2025-21742" type="cve" title="CVE-2025-21742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21743" id="CVE-2025-21743" type="cve" title="CVE-2025-21743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21750" id="CVE-2025-21750" type="cve" title="CVE-2025-21750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21761" id="CVE-2025-21761" type="cve" title="CVE-2025-21761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21765" id="CVE-2025-21765" type="cve" title="CVE-2025-21765"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21771" id="CVE-2025-21771" type="cve" title="CVE-2025-21771"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21777" id="CVE-2025-21777" type="cve" title="CVE-2025-21777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21785" id="CVE-2025-21785" type="cve" title="CVE-2025-21785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21786" id="CVE-2025-21786" type="cve" title="CVE-2025-21786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21790" id="CVE-2025-21790" type="cve" title="CVE-2025-21790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21791" id="CVE-2025-21791" type="cve" title="CVE-2025-21791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21795" id="CVE-2025-21795" type="cve" title="CVE-2025-21795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21796" id="CVE-2025-21796" type="cve" title="CVE-2025-21796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21826" id="CVE-2025-21826" type="cve" title="CVE-2025-21826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21828" id="CVE-2025-21828" type="cve" title="CVE-2025-21828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21837" id="CVE-2025-21837" type="cve" title="CVE-2025-21837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21844" id="CVE-2025-21844" type="cve" title="CVE-2025-21844"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21846" id="CVE-2025-21846" type="cve" title="CVE-2025-21846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21847" id="CVE-2025-21847" type="cve" title="CVE-2025-21847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21851" id="CVE-2025-21851" type="cve" title="CVE-2025-21851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21853" id="CVE-2025-21853" type="cve" title="CVE-2025-21853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21855" id="CVE-2025-21855" type="cve" title="CVE-2025-21855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21857" id="CVE-2025-21857" type="cve" title="CVE-2025-21857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21861" id="CVE-2025-21861" type="cve" title="CVE-2025-21861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21863" id="CVE-2025-21863" type="cve" title="CVE-2025-21863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21864" id="CVE-2025-21864" type="cve" title="CVE-2025-21864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21976" id="CVE-2025-21976" type="cve" title="CVE-2025-21976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22056" id="CVE-2025-22056" type="cve" title="CVE-2025-22056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37749" id="CVE-2025-37749" type="cve" title="CVE-2025-37749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37994" id="CVE-2025-37994" type="cve" title="CVE-2025-37994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38116" id="CVE-2025-38116" type="cve" title="CVE-2025-38116"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38369" id="CVE-2025-38369" type="cve" title="CVE-2025-38369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38412" id="CVE-2025-38412" type="cve" title="CVE-2025-38412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38468" id="CVE-2025-38468" type="cve" title="CVE-2025-38468"/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333985" id="2333985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334373" id="2334373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334415" id="2334415" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334547" id="2334547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334548" id="2334548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334676" id="2334676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337121" id="2337121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338185" id="2338185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338211" id="2338211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338813" id="2338813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338821" id="2338821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338828" id="2338828" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2338998" id="2338998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339130" id="2339130" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2339141" id="2339141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343172" id="2343172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343186" id="2343186" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344684" id="2344684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2344687" id="2344687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2345240" id="2345240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2346272" id="2346272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348522" id="2348522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348523" id="2348523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348541" id="2348541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348543" id="2348543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348547" id="2348547" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348550" id="2348550" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348556" id="2348556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348561" id="2348561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348567" id="2348567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348572" id="2348572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348574" id="2348574" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348577" id="2348577" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348581" id="2348581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348584" id="2348584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348587" id="2348587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348590" id="2348590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348592" id="2348592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348593" id="2348593" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348595" id="2348595" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348597" id="2348597" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348600" id="2348600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348601" id="2348601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348602" id="2348602" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348603" id="2348603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348612" id="2348612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348617" id="2348617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348620" id="2348620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348621" id="2348621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348625" id="2348625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348629" id="2348629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348630" id="2348630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348645" id="2348645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348647" id="2348647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348650" id="2348650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348656" id="2348656" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350363" id="2350363" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350364" id="2350364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350373" id="2350373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350375" id="2350375" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350386" id="2350386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350392" id="2350392" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350396" id="2350396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350397" id="2350397" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350589" id="2350589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350725" id="2350725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2350726" id="2350726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351605" id="2351605" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351606" id="2351606" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351608" id="2351608" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351612" id="2351612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351613" id="2351613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351616" id="2351616" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351618" id="2351618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351620" id="2351620" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351624" id="2351624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351625" id="2351625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2351629" id="2351629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356664" id="2356664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360215" id="2360215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363332" id="2363332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366125" id="2366125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369184" id="2369184" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376076" id="2376076" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383398" id="2383398" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383432" id="2383432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383913" id="2383913" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20095.html" id="ALSA-2025:20095" type="self" title="ALSA-2025:20095"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.8.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">a72b6e57dceb1e7276688126d557fbd67500eaeacc9ad33910dc9942847b3284</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.8.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">c08870aa0fc3ac8952314b044f485ac44df68bf922dc882b8ae7f0ecff83a271</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.8.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.8.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.8.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">edc4cae6164ff997c1fbbdf46bad9e3008feef4ff16685938a27fd928c6df9fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20145</id>
    <title>Low: shadow-utils security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:50:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts.   

Security Fix(es):  

  * shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20145" id="RHSA-2025:20145" type="rhsa" title="RHSA-2025:20145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-56433" id="CVE-2024-56433" type="cve" title="CVE-2024-56433"/>
      <reference href="https://bugzilla.redhat.com/2334165" id="2334165" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20145.html" id="ALSA-2025:20145" type="self" title="ALSA-2025:20145"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="shadow-utils-subid-devel" version="4.15.0" release="8.el10" epoch="2" arch="ppc64le" src="shadow-utils-4.15.0-8.el10.src.rpm">
          <filename>shadow-utils-subid-devel-4.15.0-8.el10.ppc64le.rpm</filename>
          <sum type="sha256">cda7c209a7cee2c1c4d957296ed9225a33cf92e9cdbfd05530ca6b24c0742940</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20478</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 10:49:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.  

Security Fix(es):  

  * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20478" id="RHSA-2025:20478" type="rhsa" title="RHSA-2025:20478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-17828" id="CVE-2018-17828" type="cve" title="CVE-2018-17828"/>
      <reference href="https://bugzilla.redhat.com/1635888" id="1635888" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20478.html" id="ALSA-2025:20478" type="self" title="ALSA-2025:20478"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="zziplib-devel" version="0.13.78" release="2.el10" epoch="0" arch="ppc64le" src="zziplib-0.13.78-2.el10.src.rpm">
          <filename>zziplib-devel-0.13.78-2.el10.ppc64le.rpm</filename>
          <sum type="sha256">aac7b29927dc4c63a97f957ad303173a28bf2310bf03716186e1abe1b6453c38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20983</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-25 10:54:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * database/sql: Postgres Scan Race Condition (CVE-2025-47907)
  * podman: Podman kube play command may overwrite host files (CVE-2025-9566)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20983" id="RHSA-2025:20983" type="rhsa" title="RHSA-2025:20983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47907" id="CVE-2025-47907" type="cve" title="CVE-2025-47907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9566" id="CVE-2025-9566" type="cve" title="CVE-2025-9566"/>
      <reference href="https://bugzilla.redhat.com/2387083" id="2387083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393152" id="2393152" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20983.html" id="ALSA-2025:20983" type="self" title="ALSA-2025:20983"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="5.el10_1" epoch="7" arch="ppc64le" src="podman-5.6.0-5.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-5.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">99b229b60951d8ac0fa8203addec92580442ba3dcb6993040514850b2a8cbae1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20994</id>
    <title>Important: ipa security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 09:05:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ipa security update</summary>
    <description>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.  

Security Fix(es):  

  * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20994" id="RHSA-2025:20994" type="rhsa" title="RHSA-2025:20994"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7493" id="CVE-2025-7493" type="cve" title="CVE-2025-7493"/>
      <reference href="https://bugzilla.redhat.com/2389448" id="2389448" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20994.html" id="ALSA-2025:20994" type="self" title="ALSA-2025:20994"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-ipatests" version="4.12.2" release="24.el10_1.1" epoch="0" arch="noarch" src="ipa-4.12.2-24.el10_1.1.src.rpm">
          <filename>python3-ipatests-4.12.2-24.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">3e3662f048ff47584d06f1f56b5ec7d326b91747469a6343ade29d870ef96426</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20998</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:51:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20998" id="RHSA-2025:20998" type="rhsa" title="RHSA-2025:20998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-20998.html" id="ALSA-2025:20998" type="self" title="ALSA-2025:20998"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libtiff-tools" version="4.6.0" release="6.el10_1.1" epoch="0" arch="ppc64le" src="libtiff-4.6.0-6.el10_1.1.src.rpm">
          <filename>libtiff-tools-4.6.0-6.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">a2b3af70cce378115243d3ee0152dacd227a8c06cc7ef1729c9100ff9d566265</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21020</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2026-01-14 12:41:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21020" id="RHSA-2025:21020" type="rhsa" title="RHSA-2025:21020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21020.html" id="ALSA-2025:21020" type="self" title="ALSA-2025:21020"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsss_nss_idmap-devel" version="2.11.1" release="2.el10_1.1" epoch="0" arch="ppc64le" src="sssd-2.11.1-2.el10_1.1.src.rpm">
          <filename>libsss_nss_idmap-devel-2.11.1-2.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">a02e37d64b152409afde47f3866a47458e6307c3715dca266bb3d08b21d46ed9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21032</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 08:58:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
  * libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21032" id="RHSA-2025:21032" type="rhsa" title="RHSA-2025:21032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11021" id="CVE-2025-11021" type="cve" title="CVE-2025-11021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4945" id="CVE-2025-4945" type="cve" title="CVE-2025-4945"/>
      <reference href="https://bugzilla.redhat.com/2367175" id="2367175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2399627" id="2399627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21032.html" id="ALSA-2025:21032" type="self" title="ALSA-2025:21032"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.6" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.6.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.6.noarch.rpm</filename>
          <sum type="sha256">bd42e9eaccb41b75d1047d4f6d5f5fcfcae47111384297589689627ad1fb0b16</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21034</id>
    <title>Important: bind security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 09:00:18"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21034" id="RHSA-2025:21034" type="rhsa" title="RHSA-2025:21034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8677" id="CVE-2025-8677" type="cve" title="CVE-2025-8677"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405830" id="2405830" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21034.html" id="ALSA-2025:21034" type="self" title="ALSA-2025:21034"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="bind-doc" version="9.18.33" release="10.el10_1.2" epoch="32" arch="noarch" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-doc-9.18.33-10.el10_1.2.noarch.rpm</filename>
          <sum type="sha256">14fe04b80ca60cf08295b2d4c7453ec62c4218f8f7033648c849ab00bfaa830a</sum>
        </package>
        <package name="bind-devel" version="9.18.33" release="10.el10_1.2" epoch="32" arch="ppc64le" src="bind-9.18.33-10.el10_1.2.src.rpm">
          <filename>bind-devel-9.18.33-10.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">fef6fb6879e43f259c99b026b03959975e8b00ea74773f7126db21a9ba0eae87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21035</id>
    <title>Moderate: xorg-x11-server-Xwayland security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-24 09:01:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21035" id="RHSA-2025:21035" type="rhsa" title="RHSA-2025:21035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21035.html" id="ALSA-2025:21035" type="self" title="ALSA-2025:21035"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.5" release="5.el10_1" epoch="0" arch="ppc64le" src="xorg-x11-server-Xwayland-24.1.5-5.el10_1.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.5-5.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">fb5191774e1561ddab3056d11fb8be34a130e3d12a131fcc49cb1d4df91c0e98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21038</id>
    <title>Important: kea security update</title>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-12-05 08:28:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kea security update</summary>
    <description>DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon.  

Security Fix(es):  

  * kea: Invalid characters cause assert (CVE-2025-11232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21038" id="RHSA-2025:21038" type="rhsa" title="RHSA-2025:21038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11232" id="CVE-2025-11232" type="cve" title="CVE-2025-11232"/>
      <reference href="https://bugzilla.redhat.com/2407178" id="2407178" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21038.html" id="ALSA-2025:21038" type="self" title="ALSA-2025:21038"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kea-keama" version="3.0.1" release="2.el10_1" epoch="0" arch="ppc64le" src="kea-3.0.1-2.el10_1.src.rpm">
          <filename>kea-keama-3.0.1-2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">c2970979f7d405855bc783007b51c49566d8438f60303e8292827ef9a544ad32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21220</id>
    <title>Important: podman security update</title>
    <issued date="2025-11-13 00:00:00"/>
    <updated date="2025-11-25 10:44:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21220" id="RHSA-2025:21220" type="rhsa" title="RHSA-2025:21220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-52881" id="CVE-2025-52881" type="cve" title="CVE-2025-52881"/>
      <reference href="https://bugzilla.redhat.com/2404715" id="2404715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21220.html" id="ALSA-2025:21220" type="self" title="ALSA-2025:21220"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="6.el10_1" epoch="7" arch="ppc64le" src="podman-5.6.0-6.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-6.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">700e3d72afedc97f0eccdf3c46892e7d2a09956f8a5309627590e930e278c421</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21931</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-05 08:40:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21931" id="RHSA-2025:21931" type="rhsa" title="RHSA-2025:21931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39730" id="CVE-2025-39730" type="cve" title="CVE-2025-39730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://bugzilla.redhat.com/2393731" id="2393731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-21931.html" id="ALSA-2025:21931" type="self" title="ALSA-2025:21931"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.13.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">16325ec0fba16295acfbe7f95fe4bd82bb37f350eab1550cc2b10a3331b06ee9</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.13.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">901703b5e2564bfec198c9cb69c93e641b146745f9bf49b44762ef889fa5ab2a</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.13.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.13.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.13.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f40016051ae0c7f500631158a16a093c0c078474232509680d60dc7d491d57dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22361</id>
    <title>Moderate: qt6-qtquick3d security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-05 07:43:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt6-qtquick3d security update</summary>
    <description>The Qt 6 Quick3D library.  

Security Fix(es):  

  * assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22361" id="RHSA-2025:22361" type="rhsa" title="RHSA-2025:22361"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11277" id="CVE-2025-11277" type="cve" title="CVE-2025-11277"/>
      <reference href="https://bugzilla.redhat.com/2401622" id="2401622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22361.html" id="ALSA-2025:22361" type="self" title="ALSA-2025:22361"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="qt6-qtquick3d-examples" version="6.9.1" release="1.el10_1.1" epoch="0" arch="ppc64le" src="qt6-qtquick3d-6.9.1-1.el10_1.1.src.rpm">
          <filename>qt6-qtquick3d-examples-6.9.1-1.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">0f24ff0af42e384af93a1abfc11854819edb272068929b7b784eb08021e76f7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22394</id>
    <title>Moderate: qt6-qtsvg security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-05 07:42:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt6-qtsvg security update</summary>
    <description>Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.  

Security Fix(es):  

  * qtsvg: Uncontrolled recursion in Qt SVG module (CVE-2025-10728)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22394" id="RHSA-2025:22394" type="rhsa" title="RHSA-2025:22394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-10728" id="CVE-2025-10728" type="cve" title="CVE-2025-10728"/>
      <reference href="https://bugzilla.redhat.com/2401244" id="2401244" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22394.html" id="ALSA-2025:22394" type="self" title="ALSA-2025:22394"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="qt6-qtsvg-examples" version="6.9.1" release="2.el10_1.2" epoch="0" arch="ppc64le" src="qt6-qtsvg-6.9.1-2.el10_1.2.src.rpm">
          <filename>qt6-qtsvg-examples-6.9.1-2.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">4bf33385c883ac2da59e4d2308f31963b1b6a62d00e81601e73b3fcb299cb059</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22395</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-15 12:44:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ublk: make sure ubq-&gt;canceling is set when queue is frozen (CVE-2025-22068)
  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: wifi: mt76: fix linked list corruption (CVE-2025-39918)
  * kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22395" id="RHSA-2025:22395" type="rhsa" title="RHSA-2025:22395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22068" id="CVE-2025-22068" type="cve" title="CVE-2025-22068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39918" id="CVE-2025-39918" type="cve" title="CVE-2025-39918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39971" id="CVE-2025-39971" type="cve" title="CVE-2025-39971"/>
      <reference href="https://bugzilla.redhat.com/2360225" id="2360225" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400628" id="2400628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404108" id="2404108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22395.html" id="ALSA-2025:22395" type="self" title="ALSA-2025:22395"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.16.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">03b2c79c905a1cfd8f7bf156b5532a5752d8f13e092ce58da3066970f9cb1dde</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.16.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f21280a6f78001cc27c663f4d45da5b363aa8be0eaf681e3c38bb6e39cd80179</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.16.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.16.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.16.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f81a07b9bff741a50e19c895abf5cad1aeb9a96d27cd8624324b10d3b246f4bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22854</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-10 08:12:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: Fix oops due to uninitialised variable (CVE-2025-38737)
  * kernel: can: j1939: implement NETDEV_UNREGISTER notification handler (CVE-2025-39925)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CVE-2025-39982)
  * kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  * kernel: net/mlx5: fs, fix UAF in flow counter release (CVE-2025-39979)
  * kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CVE-2025-39983)
  * kernel: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CVE-2025-40047)
  * kernel: iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVE-2025-40058)
  * kernel: ice: ice_adapter: release xa entry on adapter allocation failure (CVE-2025-40185)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22854" id="RHSA-2025:22854" type="rhsa" title="RHSA-2025:22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38737" id="CVE-2025-38737" type="cve" title="CVE-2025-38737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39925" id="CVE-2025-39925" type="cve" title="CVE-2025-39925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39979" id="CVE-2025-39979" type="cve" title="CVE-2025-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39981" id="CVE-2025-39981" type="cve" title="CVE-2025-39981"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39982" id="CVE-2025-39982" type="cve" title="CVE-2025-39982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39983" id="CVE-2025-39983" type="cve" title="CVE-2025-39983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40047" id="CVE-2025-40047" type="cve" title="CVE-2025-40047"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40058" id="CVE-2025-40058" type="cve" title="CVE-2025-40058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40185" id="CVE-2025-40185" type="cve" title="CVE-2025-40185"/>
      <reference href="https://bugzilla.redhat.com/2393527" id="2393527" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400629" id="2400629" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404100" id="2404100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404105" id="2404105" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404109" id="2404109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404117" id="2404117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406758" id="2406758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406776" id="2406776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414741" id="2414741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-22854.html" id="ALSA-2025:22854" type="self" title="ALSA-2025:22854"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.20.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">0888c209768ecbd0f0ea97667823ab3b244b8bcc1db4fc9ad4c0b58ed2299d5b</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.20.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">80545e839b04fabe902f01793f9173f762012b1865885091c5a8241e50da7c8c</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.20.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.20.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.20.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">a558d0c059fa03b64718386e64206fcb8afa851a9946cff2e89bdf45dcffbb35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23008</id>
    <title>Moderate: mysql8.4 security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:13:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
  * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
  * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
  * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23008" id="RHSA-2025:23008" type="rhsa" title="RHSA-2025:23008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53040" id="CVE-2025-53040" type="cve" title="CVE-2025-53040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53042" id="CVE-2025-53042" type="cve" title="CVE-2025-53042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53044" id="CVE-2025-53044" type="cve" title="CVE-2025-53044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53045" id="CVE-2025-53045" type="cve" title="CVE-2025-53045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53053" id="CVE-2025-53053" type="cve" title="CVE-2025-53053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53054" id="CVE-2025-53054" type="cve" title="CVE-2025-53054"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53062" id="CVE-2025-53062" type="cve" title="CVE-2025-53062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53069" id="CVE-2025-53069" type="cve" title="CVE-2025-53069"/>
      <reference href="https://bugzilla.redhat.com/2405486" id="2405486" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405491" id="2405491" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405511" id="2405511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405514" id="2405514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405523" id="2405523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405534" id="2405534" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405541" id="2405541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405544" id="2405544" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23008.html" id="ALSA-2025:23008" type="self" title="ALSA-2025:23008"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="mysql8.4-test-data" version="8.4.7" release="1.el10_1" epoch="0" arch="noarch" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-test-data-8.4.7-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">308864d516d16c4e302797a701e15826a01fa581d1dd9b23daed92618465f9b9</sum>
        </package>
        <package name="mysql8.4-devel" version="8.4.7" release="1.el10_1" epoch="0" arch="ppc64le" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-devel-8.4.7-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">663878c0e8281a0257cb693b4e82ed8d5a37e940814afe419140f779c833ba14</sum>
        </package>
        <package name="mysql8.4-test" version="8.4.7" release="1.el10_1" epoch="0" arch="ppc64le" src="mysql8.4-8.4.7-1.el10_1.src.rpm">
          <filename>mysql8.4-test-8.4.7-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">e08ff6cdfbaf3d77618c32610b2c9c975d760dc3e7ab0634e9314c6c949e1c63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23083</id>
    <title>Important: wireshark security update</title>
    <issued date="2025-12-10 00:00:00"/>
    <updated date="2025-12-12 10:17:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23083" id="RHSA-2025:23083" type="rhsa" title="RHSA-2025:23083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13499" id="CVE-2025-13499" type="cve" title="CVE-2025-13499"/>
      <reference href="https://bugzilla.redhat.com/2416293" id="2416293" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23083.html" id="ALSA-2025:23083" type="self" title="ALSA-2025:23083"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="wireshark-devel" version="4.4.2" release="4.el10_1.1" epoch="1" arch="ppc64le" src="wireshark-4.4.2-4.el10_1.1.src.rpm">
          <filename>wireshark-devel-4.4.2-4.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">4bebdcd2fb2456d58b71b6d09b1f5e418af053e657661483137b1dec2730ccbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23139</id>
    <title>Moderate: libsoup3 security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-12 10:26:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion (CVE-2025-12105)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23139" id="RHSA-2025:23139" type="rhsa" title="RHSA-2025:23139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12105" id="CVE-2025-12105" type="cve" title="CVE-2025-12105"/>
      <reference href="https://bugzilla.redhat.com/2405992" id="2405992" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23139.html" id="ALSA-2025:23139" type="self" title="ALSA-2025:23139"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.7" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.7.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.7.noarch.rpm</filename>
          <sum type="sha256">92cdf9ad06b1c825280250ae11fd29775dd0a3a51cedad09418ace68e66b2555</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23141</id>
    <title>Moderate: ruby security update</title>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2026-01-05 20:34:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ruby security update</summary>
    <description>Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.  

Security Fix(es):  

  * resolv: Denial of Service in resolv gem (CVE-2025-24294)
  * rexml: REXML denial of service (CVE-2025-58767)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23141" id="RHSA-2025:23141" type="rhsa" title="RHSA-2025:23141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24294" id="CVE-2025-24294" type="cve" title="CVE-2025-24294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58767" id="CVE-2025-58767" type="cve" title="CVE-2025-58767"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61594" id="CVE-2025-61594" type="cve" title="CVE-2025-61594"/>
      <reference href="https://bugzilla.redhat.com/2379684" id="2379684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396186" id="2396186" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23141.html" id="ALSA-2025:23141" type="self" title="ALSA-2025:23141"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="ruby-doc" version="3.3.10" release="11.el10_1" epoch="0" arch="noarch" src="ruby-3.3.10-11.el10_1.src.rpm">
          <filename>ruby-doc-3.3.10-11.el10_1.noarch.rpm</filename>
          <sum type="sha256">e35f1f991e04d33080e059b4f79a5a67752afca15d20fd0cbd8e3b7cf6c5a4b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23279</id>
    <title>Important: kernel security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2026-01-05 20:25:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
  * kernel: net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23279" id="RHSA-2025:23279" type="rhsa" title="RHSA-2025:23279"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38499" id="CVE-2025-38499" type="cve" title="CVE-2025-38499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39984" id="CVE-2025-39984" type="cve" title="CVE-2025-39984"/>
      <reference href="https://bugzilla.redhat.com/2387670" id="2387670" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404111" id="2404111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23279.html" id="ALSA-2025:23279" type="self" title="ALSA-2025:23279"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.21.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">049f153967cb61e9ed79bf3bae24a509cb4bba7a0b8413ac8d4e2941a8e52bcd</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.21.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">9eee20825cfdb6e33b36f3b566bb23c4a1a635e5647b5e72286e7c3e297d6a8f</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.21.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.21.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.21.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">b8a97c5ba516c26cc01ffa57fd169e7ce7350f4ba7bdac7c3e0013821ed62262</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23295</id>
    <title>Moderate: podman security update</title>
    <issued date="2025-12-16 00:00:00"/>
    <updated date="2025-12-22 13:57:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23295" id="RHSA-2025:23295" type="rhsa" title="RHSA-2025:23295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-58183" id="CVE-2025-58183" type="cve" title="CVE-2025-58183"/>
      <reference href="https://bugzilla.redhat.com/2407258" id="2407258" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23295.html" id="ALSA-2025:23295" type="self" title="ALSA-2025:23295"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="8.el10_1" epoch="7" arch="ppc64le" src="podman-5.6.0-8.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-8.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">3dc63bdc57599a802a1850c122364918793354c9793254492b96ded10c9a8875</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23940</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-12-22 00:00:00"/>
    <updated date="2025-12-23 05:59:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23940" id="RHSA-2025:23940" type="rhsa" title="RHSA-2025:23940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2025-23940.html" id="ALSA-2025:23940" type="self" title="ALSA-2025:23940"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-idle" version="3.12.12" release="1.el10_1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-idle-3.12.12-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">028351c0f14374e7a6f1b40b8e2bace5f519ff906637b43f2eeee994008ac17c</sum>
        </package>
        <package name="python3-test" version="3.12.12" release="1.el10_1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-test-3.12.12-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">97b0fee5be84db8a80b451ae9355fa40324c39114e07db1592ac6642ca0520f0</sum>
        </package>
        <package name="python3-debug" version="3.12.12" release="1.el10_1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-1.el10_1.src.rpm">
          <filename>python3-debug-3.12.12-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">c4eb80704cf0b31e55bbd0445a7c7c551c175c0b84767c8a1c41b3bca33d4408</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0128</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:29:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0128" id="RHSA-2026:0128" type="rhsa" title="RHSA-2026:0128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0128.html" id="ALSA-2026:0128" type="self" title="ALSA-2026:0128"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="poppler-cpp-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-cpp-devel-24.02.0-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">0f1f65b3860aba4c7669004c7eda6d89bc60c878dda51b6bcae2f21604d1e3ed</sum>
        </package>
        <package name="poppler-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-devel-24.02.0-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">15c3379e6c2a1f3f0252866d087901be328e1a8fd1ce4f51a79717b2b2607d9f</sum>
        </package>
        <package name="poppler-qt6-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-qt6-devel-24.02.0-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">8e0dc52d15bf2652777a5a28b1eb40d8900f8141817adeae1b12b05793c2ed4d</sum>
        </package>
        <package name="poppler-glib-doc" version="24.02.0" release="7.el10_1" epoch="0" arch="noarch" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-glib-doc-24.02.0-7.el10_1.noarch.rpm</filename>
          <sum type="sha256">94cfb72d303bddf260881ca767e64ff91af5fbb197dc31d7b0289d77cdb12fbc</sum>
        </package>
        <package name="poppler-glib-devel" version="24.02.0" release="7.el10_1" epoch="0" arch="ppc64le" src="poppler-24.02.0-7.el10_1.src.rpm">
          <filename>poppler-glib-devel-24.02.0-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f606a873388b17a054cf2817f64032a8c59deeae65dc7c3bcb9b0f6f0fd10e30</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0423</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:49:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins) (CVE-2025-14523)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0423" id="RHSA-2026:0423" type="rhsa" title="RHSA-2026:0423"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14523" id="CVE-2025-14523" type="cve" title="CVE-2025-14523"/>
      <reference href="https://bugzilla.redhat.com/2421349" id="2421349" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0423.html" id="ALSA-2026:0423" type="self" title="ALSA-2026:0423"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.8" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.8.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.8.noarch.rpm</filename>
          <sum type="sha256">8ed97c9a1a703661eb82c105face921f622fc4708b0498230b898951295899e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0453</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:26:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CVE-2025-39806)
  * kernel: audit: fix out-of-bounds read in audit_compare_dname_path() (CVE-2025-39840)
  * kernel: mm: slub: avoid wake up kswapd in set_track_prepare (CVE-2025-39843)
  * kernel: net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CVE-2025-39905)
  * kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
  * kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)
  * kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CVE-2025-68287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0453" id="RHSA-2026:0453" type="rhsa" title="RHSA-2026:0453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39806" id="CVE-2025-39806" type="cve" title="CVE-2025-39806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39840" id="CVE-2025-39840" type="cve" title="CVE-2025-39840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39843" id="CVE-2025-39843" type="cve" title="CVE-2025-39843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39905" id="CVE-2025-39905" type="cve" title="CVE-2025-39905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39966" id="CVE-2025-39966" type="cve" title="CVE-2025-39966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40176" id="CVE-2025-40176" type="cve" title="CVE-2025-40176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68287" id="CVE-2025-68287" type="cve" title="CVE-2025-68287"/>
      <reference href="https://bugzilla.redhat.com/2395807" id="2395807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396936" id="2396936" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396941" id="2396941" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400611" id="2400611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404107" id="2404107" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414524" id="2414524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422788" id="2422788" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0453.html" id="ALSA-2026:0453" type="self" title="ALSA-2026:0453"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.27.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">6ba5bcf9b0a580be8b58a9a4dee8cb55862d1d916b73c1383e3a4356a082b264</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.27.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">7df19aec99750d6326dbe01df5ea8678d04138826c478115758a015c17627f13</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.27.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.27.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.27.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">b03022af93abeb92f2b0b12903cf794fa5583fd45c5a0053d3950689dda006bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0525</id>
    <title>Moderate: postgresql16 security update</title>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-16 15:06:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>postgresql16 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0525" id="RHSA-2026:0525" type="rhsa" title="RHSA-2026:0525"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12818" id="CVE-2025-12818" type="cve" title="CVE-2025-12818"/>
      <reference href="https://bugzilla.redhat.com/2414825" id="2414825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414826" id="2414826" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0525.html" id="ALSA-2026:0525" type="self" title="ALSA-2026:0525"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="postgresql-test-rpm-macros" version="16.11" release="1.el10_1" epoch="0" arch="noarch" src="postgresql16-16.11-1.el10_1.src.rpm">
          <filename>postgresql-test-rpm-macros-16.11-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">91d5ad13424ef2d2c5fdc1a5bad93edce3ef8e72ecff6128a255f9322c45da6e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0545</id>
    <title>Important: podman security update</title>
    <issued date="2026-01-14 00:00:00"/>
    <updated date="2026-01-16 15:04:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS (CVE-2025-47913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0545" id="RHSA-2026:0545" type="rhsa" title="RHSA-2026:0545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47913" id="CVE-2025-47913" type="cve" title="CVE-2025-47913"/>
      <reference href="https://bugzilla.redhat.com/2414943" id="2414943" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0545.html" id="ALSA-2026:0545" type="self" title="ALSA-2026:0545"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="11.el10_1" epoch="7" arch="ppc64le" src="podman-5.6.0-11.el10_1.src.rpm">
          <filename>podman-tests-5.6.0-11.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">6eb4cd96c88ebeb62c5b3b297a0f3e7b2f3fd099236cf15ddbb1e95fc6d516a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0786</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-23 07:51:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0786" id="RHSA-2026:0786" type="rhsa" title="RHSA-2026:0786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0786.html" id="ALSA-2026:0786" type="self" title="ALSA-2026:0786"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.28.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">4564ea5a3121a7a110f54548ed4cbfed8c60862827c996dd2a62381e9768b357</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.28.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">62c003d74c03bf58ab4f65e4d4302e8f7e546c95f629ae52659c0d8ba9da1d4b</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.28.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.28.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.28.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">703c540fe09d9b327b3512f0940cd0d7fa7fcba0dd76c8efb92b101d167cf1cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:37:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">07d08bee9f8d93bcd43c58e6277bdc67fadabcba8e2da2e18fabfe64745ef547</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">22799913337f9f94b23b58909a96068e9e89bf17c343229952b9bb51065a7c65</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">271b316f6719f9e22975c4ffb330981061f1928b9c24cb6fc76506d8b2d5c6b6</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">2a899d5dcd9fe8835dca5554a14bdd96f262b4e653d0d985b066be7159e52b33</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">4a50a44f7f4be6e01bc9486a57a1282549cbaa19793ddb03a185ea8683bec684</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">52643f94e6de74a93a0c13190970b44bc8052856e55fc67a89d8139f7ee72991</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">5c07f021f9e63744c076732ec9afc2aa73804390982ed6dd16decbea7a18a179</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">64ebe13adb569de3c026188fc1503a88bbc47e15b5d83f528275f13903d235e3</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">6f6269b0dcd3b10e69fa0ff11cadac7da8393f3b88cb9a2269cd38cd9b666eba</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">8283bdc9ac80b8e7d282a52c2ec2bd2984ca88d977efef67627195094ebd684b</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">898adec0e7b64063416be169a7c1c133ffaf632ff1dfeffcab4d657e22eae3c2</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">8b22fd963a5721768ffca472b754e678fc718dcb2329cf268e41c544363d7ca0</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">dd449034874c0a5b4c1e7615df31458ac7aeb8d70927d6e0290112f8d4cd698c</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.10.0.7" release="1.el10.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.10.0.7-1.el10.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.10.0.7-1.el10.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ede94072d188f7a253b187dea9f8179ebcbce2994eec9ffd21b32981ad59d3bb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0933</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 14:39:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0933" id="RHSA-2026:0933" type="rhsa" title="RHSA-2026:0933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0933.html" id="ALSA-2026:0933" type="self" title="ALSA-2026:0933"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="java-25-openjdk-headless-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-headless-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">07c102651c4553f35933612db3d7ebdcd0ec76868affa098a77326d6cb1b1d96</sum>
        </package>
        <package name="java-25-openjdk-jmods-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-jmods-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">10160b86a404068ee28afd33e848dcba3a36c63abc51adebc902a017789e428d</sum>
        </package>
        <package name="java-25-openjdk-demo-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-demo-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">547f2894835b9557bfdf078672881046267abecfca86e0649d31dce1325b761e</sum>
        </package>
        <package name="java-25-openjdk-devel-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-devel-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">5c195bb84f235519c73cd19a96a863ef0899b389a7211c3a0aea5e60cffeae63</sum>
        </package>
        <package name="java-25-openjdk-devel-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-devel-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">71cfd2d64c19f3a69b37c22ee3943a9032d240bd55569b745543ec95d08056cf</sum>
        </package>
        <package name="java-25-openjdk-demo-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-demo-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">75def8d39e09e672b9a14ff0bfa0809250a3f12a26577d4ea4df23f1deed4e9d</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">7b960fa014180d228d62483fb26b54ecb12a268aebc882c1c4c1736bb1a8ff88</sum>
        </package>
        <package name="java-25-openjdk-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">7dd08ac301dd1e044076908501708b55c1304f65a3c53829018c0159381ab384</sum>
        </package>
        <package name="java-25-openjdk-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">86d78d55fe55648c8973157de1461025f8bd0ed192b129d46b5052ba6258df1c</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">91416ef3921051384c293bd49893717dfa7cb1a43ed0cf437aee5b3d417c52cc</sum>
        </package>
        <package name="java-25-openjdk-src-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-src-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">c8e365797f0196f96d865504ec3f54ea89e87ef1cafe095269a1abb7d1a83917</sum>
        </package>
        <package name="java-25-openjdk-headless-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-headless-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">d269222425f7a4812493c6d82ce1e0c15aa3629debb5b9ba52b9b733bf67a381</sum>
        </package>
        <package name="java-25-openjdk-jmods-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-jmods-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">d2d8b172e230c4826e143166822c956b29d3f99d3cc551e0394d74117dbba2fc</sum>
        </package>
        <package name="java-25-openjdk-static-libs-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-static-libs-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">d57f97229f9340bba6625afed0ace9bf9b705f362fa99055b313ddda10f3f052</sum>
        </package>
        <package name="java-25-openjdk-src-fastdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-src-fastdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">d8940f14c2df97db4c67b5a92c9c5d0879b6dc80f0e6429310575bd1ab1183e3</sum>
        </package>
        <package name="java-25-openjdk-static-libs-slowdebug" version="25.0.2.0.10" release="1.el10" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.2.0.10-1.el10.src.rpm">
          <filename>java-25-openjdk-static-libs-slowdebug-25.0.2.0.10-1.el10.ppc64le.rpm</filename>
          <sum type="sha256">df62bfe0069bec9e09831cb928229694f592e5dc6dca4b13e220fbf61dcce43d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0975</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-23 23:34:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0975" id="RHSA-2026:0975" type="rhsa" title="RHSA-2026:0975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-0975.html" id="ALSA-2026:0975" type="self" title="ALSA-2026:0975"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="glib2-doc" version="2.80.4" release="10.el10_1.12" epoch="0" arch="ppc64le" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-doc-2.80.4-10.el10_1.12.ppc64le.rpm</filename>
          <sum type="sha256">832f53ab177ecbd0abc01fd2ae927a7ba981c7748a4e433cbd67846d6af0df86</sum>
        </package>
        <package name="glib2-static" version="2.80.4" release="10.el10_1.12" epoch="0" arch="ppc64le" src="glib2-2.80.4-10.el10_1.12.src.rpm">
          <filename>glib2-static-2.80.4-10.el10_1.12.ppc64le.rpm</filename>
          <sum type="sha256">f53718c97e2d20239e017e431d4e3c07e87d69de65ecaab4e757bec0dfbc7d90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10711</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-30 07:17:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10711" id="RHSA-2026:10711" type="rhsa" title="RHSA-2026:10711"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-10711.html" id="ALSA-2026:10711" type="self" title="ALSA-2026:10711"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-debug" version="3.12.12" release="3.el10_1.3" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.3.src.rpm">
          <filename>python3-debug-3.12.12-3.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">b206299bb03d7616f9b5a9bd984f8a3f2205eba9e83373828e1ac9da601a3881</sum>
        </package>
        <package name="python3-test" version="3.12.12" release="3.el10_1.3" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.3.src.rpm">
          <filename>python3-test-3.12.12-3.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">bf9acb4481c46bec46a8ae5ef9675285b7c4a8be452f5fc97c8a13b6d3edc00c</sum>
        </package>
        <package name="python3-idle" version="3.12.12" release="3.el10_1.3" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.3.src.rpm">
          <filename>python3-idle-3.12.12-3.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">c403c0e260270bf8338b75bb26c93d69bf7874a54e70703ea9a0c142eae77131</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11352</id>
    <title>Important: xorg-x11-server-Xwayland security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 08:49:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server-Xwayland security update</summary>
    <description>Xwayland is an X server for running X clients under Wayland.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11352" id="RHSA-2026:11352" type="rhsa" title="RHSA-2026:11352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-11352.html" id="ALSA-2026:11352" type="self" title="ALSA-2026:11352"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="xorg-x11-server-Xwayland-devel" version="24.1.5" release="6.el10_1" epoch="0" arch="ppc64le" src="xorg-x11-server-Xwayland-24.1.5-6.el10_1.src.rpm">
          <filename>xorg-x11-server-Xwayland-devel-24.1.5-6.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">2fc241cbaf3bdda0bb320b99247aacde279e87fbbbb7ae44abee428f3ed5d953</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11413</id>
    <title>Important: yggdrasil security update</title>
    <issued date="2026-04-28 00:00:00"/>
    <updated date="2026-04-29 11:31:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yggdrasil security update</summary>
    <description>yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker.  

Security Fix(es):  

  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11413" id="RHSA-2026:11413" type="rhsa" title="RHSA-2026:11413"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25679" id="CVE-2026-25679" type="cve" title="CVE-2026-25679"/>
      <reference href="https://bugzilla.redhat.com/2445356" id="2445356" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-11413.html" id="ALSA-2026:11413" type="self" title="ALSA-2026:11413"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="yggdrasil-devel" version="0.4.8" release="4.el10_1" epoch="0" arch="ppc64le" src="yggdrasil-0.4.8-4.el10_1.src.rpm">
          <filename>yggdrasil-devel-0.4.8-4.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">501bbbab4a58992b3d14086a9d10c373457a03ff168a2e491611b31a06832fa1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1178</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-02-02 11:35:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service due to data race in vmalloc's show_numa_info function (CVE-2025-38383)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1178" id="RHSA-2026:1178" type="rhsa" title="RHSA-2026:1178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38383" id="CVE-2025-38383" type="cve" title="CVE-2025-38383"/>
      <reference href="https://bugzilla.redhat.com/2383425" id="2383425" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1178.html" id="ALSA-2026:1178" type="self" title="ALSA-2026:1178"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.29.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">99c5f287473f8b441f3d37b113e3383de44ec96528315dcd3f2739d30411273e</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.29.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f36a679801af0b31ed7cc23b26099f036cb77ce73d1441a9bf1fb78737154695</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.29.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.29.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.29.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f64aad199936b0ea037486db2db7b7f7dbbb30d5c18f92a43f7620e00a1d4553</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:12265</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-04-30 00:00:00"/>
    <updated date="2026-05-01 12:12:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:12265" id="RHSA-2026:12265" type="rhsa" title="RHSA-2026:12265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-12265.html" id="ALSA-2026:12265" type="self" title="ALSA-2026:12265"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libtiff-tools" version="4.6.0" release="6.el10_1.3" epoch="0" arch="ppc64le" src="libtiff-4.6.0-6.el10_1.3.src.rpm">
          <filename>libtiff-tools-4.6.0-6.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">1d8fbd5394f1eb3254ff74359d8c761de3f3fda184c43132a6b3a8d0f9429641</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1334</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:28:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)
  * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1334" id="RHSA-2026:1334" type="rhsa" title="RHSA-2026:1334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0861" id="CVE-2026-0861" type="cve" title="CVE-2026-0861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0915" id="CVE-2026-0915" type="cve" title="CVE-2026-0915"/>
      <reference href="https://bugzilla.redhat.com/2429771" id="2429771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430201" id="2430201" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1334.html" id="ALSA-2026:1334" type="self" title="ALSA-2026:1334"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="glibc-nss-devel" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-nss-devel-2.39-58.el10_1.7.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">3eb130c8dbc2e5c7280cfaf6580eba17afaf7789cd06c1571bbd864dbf546ab0</sum>
        </package>
        <package name="nss_db" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>nss_db-2.39-58.el10_1.7.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">852ce7ee76ffe4f9d7ce71a8c4694cd6ea696d683a04d3195c05af2a17866e76</sum>
        </package>
        <package name="glibc-benchtests" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-benchtests-2.39-58.el10_1.7.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">964be069c3e1389b425770c3ef2e3b6c018db90b65306228302e8788f5bea411</sum>
        </package>
        <package name="nss_hesiod" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>nss_hesiod-2.39-58.el10_1.7.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">fad63edd3dd02108bb8b104aaf27a831595ffdf2ba891983bc97aee1fe12c42b</sum>
        </package>
        <package name="glibc-static" version="2.39" release="58.el10_1.7.alma.1" epoch="0" arch="ppc64le" src="glibc-2.39-58.el10_1.7.alma.1.src.rpm">
          <filename>glibc-static-2.39-58.el10_1.7.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">fbb2019176dae31ec6d788549d0b723b6c25758ac18f8fe6faa7c0e3820fea4a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13498</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-06 09:59:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13498" id="RHSA-2026:13498" type="rhsa" title="RHSA-2026:13498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-13498.html" id="ALSA-2026:13498" type="self" title="ALSA-2026:13498"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dovecot-devel" version="2.3.21" release="16.el10_1.1" epoch="1" arch="ppc64le" src="dovecot-2.3.21-16.el10_1.1.src.rpm">
          <filename>dovecot-devel-2.3.21-16.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">c7e13a76d57e288b98226afcafa7baeff870620bc7f7dfa91267e3d9bf7c8641</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13515</id>
    <title>Moderate: freeipmi security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-06 09:58:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeipmi security update</summary>
    <description>The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.  

Security Fix(es):  

  * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13515" id="RHSA-2026:13515" type="rhsa" title="RHSA-2026:13515"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33554" id="CVE-2026-33554" type="cve" title="CVE-2026-33554"/>
      <reference href="https://bugzilla.redhat.com/2450778" id="2450778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-13515.html" id="ALSA-2026:13515" type="self" title="ALSA-2026:13515"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="freeipmi-devel" version="1.6.17" release="1.el10_1" epoch="0" arch="ppc64le" src="freeipmi-1.6.17-1.el10_1.src.rpm">
          <filename>freeipmi-devel-1.6.17-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">3b367a1bae75c3aa04eea0279eef65584e34948a62c06a7433216780b9264a53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13566</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-04 00:00:00"/>
    <updated date="2026-05-06 23:00:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13566" id="RHSA-2026:13566" type="rhsa" title="RHSA-2026:13566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23270" id="CVE-2026-23270" type="cve" title="CVE-2026-23270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31419" id="CVE-2026-31419" type="cve" title="CVE-2026-31419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/2448745" id="2448745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457829" id="2457829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-13566.html" id="ALSA-2026:13566" type="self" title="ALSA-2026:13566"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.55.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.55.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.55.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">a7bb2e0095da5590de6eeb007d74fc1c6f8d4743e36a0b5892acd23140078efb</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.55.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.55.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.55.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">bfd2f1d01dc65781f0aa99081c0d8d3dd753909bcd4312a7f1d6daeb99478af0</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.55.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.55.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.55.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">d4e1f1469955c3a7c3b195e9a08e0823e9ae0cd1cbcdb1b45e89dc5fe6ff6db8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13644</id>
    <title>Moderate: corosync security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-13 08:46:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13644" id="RHSA-2026:13644" type="rhsa" title="RHSA-2026:13644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35091" id="CVE-2026-35091" type="cve" title="CVE-2026-35091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35092" id="CVE-2026-35092" type="cve" title="CVE-2026-35092"/>
      <reference href="https://bugzilla.redhat.com/2453813" id="2453813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453814" id="2453814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-13644.html" id="ALSA-2026:13644" type="self" title="ALSA-2026:13644"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="corosync-vqsim" version="3.1.9" release="2.el10_1.1" epoch="0" arch="ppc64le" src="corosync-3.1.9-2.el10_1.1.src.rpm">
          <filename>corosync-vqsim-3.1.9-2.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">a4b0a92a3062b4a1114c59ba75064c783b9e635dc606dec6db9d1508c1c24521</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15888</id>
    <title>Important: openexr security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15888" id="RHSA-2026:15888" type="rhsa" title="RHSA-2026:15888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34588" id="CVE-2026-34588" type="cve" title="CVE-2026-34588"/>
      <reference href="https://bugzilla.redhat.com/2455408" id="2455408" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-15888.html" id="ALSA-2026:15888" type="self" title="ALSA-2026:15888"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="openexr-devel" version="3.1.10" release="8.el10_1.2" epoch="0" arch="ppc64le" src="openexr-3.1.10-8.el10_1.2.src.rpm">
          <filename>openexr-devel-3.1.10-8.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">f60a98265ca4c5c11b3d41032df0234b35be1183b05c1d9bf12eb92f93d6cc92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15968</id>
    <title>Moderate: libsoup3 security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server (CVE-2026-4271)
  * libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15968" id="RHSA-2026:15968" type="rhsa" title="RHSA-2026:15968"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4271" id="CVE-2026-4271" type="cve" title="CVE-2026-4271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5119" id="CVE-2026-5119" type="cve" title="CVE-2026-5119"/>
      <reference href="https://bugzilla.redhat.com/2448044" id="2448044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452932" id="2452932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-15968.html" id="ALSA-2026:15968" type="self" title="ALSA-2026:15968"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.11" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.11.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.11.noarch.rpm</filename>
          <sum type="sha256">ddbf5771fe4042e2e5ad17e58df1bbc5546ec7fbda1024158f0ab6750669fbe9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15969</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-13 08:36:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15969" id="RHSA-2026:15969" type="rhsa" title="RHSA-2026:15969"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-15969.html" id="ALSA-2026:15969" type="self" title="ALSA-2026:15969"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="glib2-static" version="2.80.4" release="10.el10_1.13" epoch="0" arch="ppc64le" src="glib2-2.80.4-10.el10_1.13.src.rpm">
          <filename>glib2-static-2.80.4-10.el10_1.13.ppc64le.rpm</filename>
          <sum type="sha256">90f5b74e4e10f22c8f97ca9fb2aba63be2e60b7984d0f16cf5a75c3bb826976c</sum>
        </package>
        <package name="glib2-doc" version="2.80.4" release="10.el10_1.13" epoch="0" arch="ppc64le" src="glib2-2.80.4-10.el10_1.13.src.rpm">
          <filename>glib2-doc-2.80.4-10.el10_1.13.ppc64le.rpm</filename>
          <sum type="sha256">e802458ddd9de09e7596f8c019cf3f64b30a9a235d2dd5a690d7e345369abf9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16014</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-13 08:29:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect (CVE-2026-25997)
  * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
  * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
  * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
  * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
  * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
  * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
  * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)
  * FreeRDP: FreeRDP: Information disclosure and denial of service via heap-buffer-overflow read (CVE-2026-33982)
  * FreeRDP: FreeRDP: Memory corruption vulnerability allows denial of service or arbitrary code execution (CVE-2026-33987)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16014" id="RHSA-2026:16014" type="rhsa" title="RHSA-2026:16014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25952" id="CVE-2026-25952" type="cve" title="CVE-2026-25952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25997" id="CVE-2026-25997" type="cve" title="CVE-2026-25997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26986" id="CVE-2026-26986" type="cve" title="CVE-2026-26986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29775" id="CVE-2026-29775" type="cve" title="CVE-2026-29775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31883" id="CVE-2026-31883" type="cve" title="CVE-2026-31883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31884" id="CVE-2026-31884" type="cve" title="CVE-2026-31884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31885" id="CVE-2026-31885" type="cve" title="CVE-2026-31885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33982" id="CVE-2026-33982" type="cve" title="CVE-2026-33982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33985" id="CVE-2026-33985" type="cve" title="CVE-2026-33985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33987" id="CVE-2026-33987" type="cve" title="CVE-2026-33987"/>
      <reference href="https://bugzilla.redhat.com/2442764" id="2442764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442768" id="2442768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442782" id="2442782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447379" id="2447379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447383" id="2447383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447385" id="2447385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447386" id="2447386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453217" id="2453217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453218" id="2453218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453226" id="2453226" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-16014.html" id="ALSA-2026:16014" type="self" title="ALSA-2026:16014"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libwinpr-devel" version="3.10.3" release="5.el10_1.8" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.8.src.rpm">
          <filename>libwinpr-devel-3.10.3-5.el10_1.8.ppc64le.rpm</filename>
          <sum type="sha256">0f89be363b52d44c5066a3fb0087fc0e4e41a451c258e83a3228aa9bf9ea5ca6</sum>
        </package>
        <package name="freerdp-devel" version="3.10.3" release="5.el10_1.8" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.8.src.rpm">
          <filename>freerdp-devel-3.10.3-5.el10_1.8.ppc64le.rpm</filename>
          <sum type="sha256">65711e3608b2208f46b057b5a4275ffee77ddb6865e41be7cd359a3ca391ec2a</sum>
        </package>
        <package name="freerdp-server" version="3.10.3" release="5.el10_1.8" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.8.src.rpm">
          <filename>freerdp-server-3.10.3-5.el10_1.8.ppc64le.rpm</filename>
          <sum type="sha256">fd1cbcb93c0af91a62e987e0cb63d96fee7dd801ba3555e3fa16ee9a508b197e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1690</id>
    <title>Important: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-05 09:56:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)
  * kernel: io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (CVE-2025-38453)
  * kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVE-2025-38568)
  * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and denial of service (CVE-2025-40294)
  * kernel: Linux kernel: Information disclosure and denial of service in Bluetooth HCI event handling (CVE-2025-40301)
  * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)
  * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1690" id="RHSA-2026:1690" type="rhsa" title="RHSA-2026:1690"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37819" id="CVE-2025-37819" type="cve" title="CVE-2025-37819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38349" id="CVE-2025-38349" type="cve" title="CVE-2025-38349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38453" id="CVE-2025-38453" type="cve" title="CVE-2025-38453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38568" id="CVE-2025-38568" type="cve" title="CVE-2025-38568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38731" id="CVE-2025-38731" type="cve" title="CVE-2025-38731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40251" id="CVE-2025-40251" type="cve" title="CVE-2025-40251"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40294" id="CVE-2025-40294" type="cve" title="CVE-2025-40294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40301" id="CVE-2025-40301" type="cve" title="CVE-2025-40301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40318" id="CVE-2025-40318" type="cve" title="CVE-2025-40318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68305" id="CVE-2025-68305" type="cve" title="CVE-2025-68305"/>
      <reference href="https://bugzilla.redhat.com/2365032" id="2365032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2381870" id="2381870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383516" id="2383516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389507" id="2389507" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393488" id="2393488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418892" id="2418892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419891" id="2419891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419896" id="2419896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419920" id="2419920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422840" id="2422840" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1690.html" id="ALSA-2026:1690" type="self" title="ALSA-2026:1690"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.31.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.31.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.31.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">367b24e7db4479459297a238cc9f575eefabd02b0da1acfef9adbc60edc220ad</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.31.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.31.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.31.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">87248b48c03dd209a62593ce8ae65f7f3d1c4cc7bd411b45d3ccb3c292804598</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.31.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.31.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.31.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">a6f86ac43be72da5ff3288b236a48c30d4f593cc11221d2dca576e40183289ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1696</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-03 11:05:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1696" id="RHSA-2026:1696" type="rhsa" title="RHSA-2026:1696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1696.html" id="ALSA-2026:1696" type="self" title="ALSA-2026:1696"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libfdisk-devel" version="2.40.2" release="15.el10_1" epoch="0" arch="ppc64le" src="util-linux-2.40.2-15.el10_1.src.rpm">
          <filename>libfdisk-devel-2.40.2-15.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">16c36a29fd26332310beb73d8716ae022d97173e7f50eef21f92a7a49203c9b9</sum>
        </package>
        <package name="libsmartcols-devel" version="2.40.2" release="15.el10_1" epoch="0" arch="ppc64le" src="util-linux-2.40.2-15.el10_1.src.rpm">
          <filename>libsmartcols-devel-2.40.2-15.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">413bf8ff4b250010eb78bc997589b9208258be5529674654c143895f087f960f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1714</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-03 11:02:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * Wireshark: NULL Pointer Dereference in Wireshark (CVE-2025-9817)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1714" id="RHSA-2026:1714" type="rhsa" title="RHSA-2026:1714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9817" id="CVE-2025-9817" type="cve" title="CVE-2025-9817"/>
      <reference href="https://bugzilla.redhat.com/2392839" id="2392839" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1714.html" id="ALSA-2026:1714" type="self" title="ALSA-2026:1714"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="wireshark-devel" version="4.4.2" release="4.el10_1.2" epoch="1" arch="ppc64le" src="wireshark-4.4.2-4.el10_1.2.src.rpm">
          <filename>wireshark-devel-4.4.2-4.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">d5429f2d30f72358d5ea4f951d2c9b1ce07d0d25edb3b6a666590fa46a173e36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1828</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-02-03 00:00:00"/>
    <updated date="2026-02-05 09:48:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1828" id="RHSA-2026:1828" type="rhsa" title="RHSA-2026:1828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1828.html" id="ALSA-2026:1828" type="self" title="ALSA-2026:1828"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-test" version="3.12.12" release="3.el10_1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.src.rpm">
          <filename>python3-test-3.12.12-3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">366e547afc894211abc4f7900bad025b6717aa9862b81a36fbf9ecc6a0eb9c75</sum>
        </package>
        <package name="python3-debug" version="3.12.12" release="3.el10_1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.src.rpm">
          <filename>python3-debug-3.12.12-3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">3c4cd5c3faa980705591e9416eeb03d2b72ea5c1cb2ca5f047dd7af12017706c</sum>
        </package>
        <package name="python3-idle" version="3.12.12" release="3.el10_1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.src.rpm">
          <filename>python3-idle-3.12.12-3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">48178befe55626b359739677abd3a6fcd231a242abe78ce93aee5cb241f6426f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1902</id>
    <title>Important: python-wheel security update</title>
    <issued date="2026-02-04 00:00:00"/>
    <updated date="2026-02-05 09:52:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1902" id="RHSA-2026:1902" type="rhsa" title="RHSA-2026:1902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-1902.html" id="ALSA-2026:1902" type="self" title="ALSA-2026:1902"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-wheel" version="0.41.2" release="5.el10_1.1" epoch="1" arch="noarch" src="python-wheel-0.41.2-5.el10_1.1.src.rpm">
          <filename>python3-wheel-0.41.2-5.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">526834e9f1485bd54d081d53739d5af8b9041cb043cbac4c4a48f5dc15693afd</sum>
        </package>
        <package name="python3-wheel-wheel" version="0.41.2" release="5.el10_1.1" epoch="1" arch="noarch" src="python-wheel-0.41.2-5.el10_1.1.src.rpm">
          <filename>python3-wheel-wheel-0.41.2-5.el10_1.1.noarch.rpm</filename>
          <sum type="sha256">d4a990e9084a15b4ecd6fe1cc0ad10bf653891914d36b6941dd44c2950e729ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2182</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 17:31:51"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719)
  * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2182" id="RHSA-2026:2182" type="rhsa" title="RHSA-2026:2182"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0719" id="CVE-2026-0719" type="cve" title="CVE-2026-0719"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1761" id="CVE-2026-1761" type="cve" title="CVE-2026-1761"/>
      <reference href="https://bugzilla.redhat.com/2427906" id="2427906" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2435961" id="2435961" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2182.html" id="ALSA-2026:2182" type="self" title="ALSA-2026:2182"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.9" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.9.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.9.noarch.rpm</filename>
          <sum type="sha256">c5a13ea7b87529168e6633802580187fdcd2de43917221fbc25a1aa3721b520d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2222</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-10 10:08:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)
  * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
  * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)
  * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)
  * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2222" id="RHSA-2026:2222" type="rhsa" title="RHSA-2026:2222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23530" id="CVE-2026-23530" type="cve" title="CVE-2026-23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23531" id="CVE-2026-23531" type="cve" title="CVE-2026-23531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23532" id="CVE-2026-23532" type="cve" title="CVE-2026-23532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23533" id="CVE-2026-23533" type="cve" title="CVE-2026-23533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23534" id="CVE-2026-23534" type="cve" title="CVE-2026-23534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23883" id="CVE-2026-23883" type="cve" title="CVE-2026-23883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23884" id="CVE-2026-23884" type="cve" title="CVE-2026-23884"/>
      <reference href="https://bugzilla.redhat.com/2430877" id="2430877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430880" id="2430880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430885" id="2430885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430886" id="2430886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430887" id="2430887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430888" id="2430888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430891" id="2430891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2222.html" id="ALSA-2026:2222" type="self" title="ALSA-2026:2222"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="freerdp-devel" version="3.10.3" release="5.el10_1.1" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.1.src.rpm">
          <filename>freerdp-devel-3.10.3-5.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">6824e2ef34d30f656d1ff00902fd3c1f2e0a13b5d762d420784243da83babaef</sum>
        </package>
        <package name="freerdp-server" version="3.10.3" release="5.el10_1.1" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.1.src.rpm">
          <filename>freerdp-server-3.10.3-5.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">91e18bf0ed2781eaa7e44e5c6c7ec0e8135ce4b637ce1c319c1413ca46a1215a</sum>
        </package>
        <package name="libwinpr-devel" version="3.10.3" release="5.el10_1.1" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.1.src.rpm">
          <filename>libwinpr-devel-3.10.3-5.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">930b71aeca4793c10f39eba94d14584d84617b988be1b0cacc62d03d017f70f5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2230</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-10 10:04:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)
  * fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)
  * fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2230" id="RHSA-2026:2230" type="rhsa" title="RHSA-2026:2230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15269" id="CVE-2025-15269" type="cve" title="CVE-2025-15269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15275" id="CVE-2025-15275" type="cve" title="CVE-2025-15275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15279" id="CVE-2025-15279" type="cve" title="CVE-2025-15279"/>
      <reference href="https://bugzilla.redhat.com/2426421" id="2426421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426423" id="2426423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426429" id="2426429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2230.html" id="ALSA-2026:2230" type="self" title="ALSA-2026:2230"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="fontforge" version="20230101" release="14.el10_1" epoch="0" arch="ppc64le" src="fontforge-20230101-14.el10_1.src.rpm">
          <filename>fontforge-20230101-14.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">2ed1233963ba031982f395b7df187508ed46bcf3b80514c9faa273613a994606</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2282</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-12 10:28:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  * kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  * kernel: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable() (CVE-2025-40133)
  * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
  * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2282" id="RHSA-2026:2282" type="rhsa" title="RHSA-2026:2282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38403" id="CVE-2025-38403" type="cve" title="CVE-2025-38403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38415" id="CVE-2025-38415" type="cve" title="CVE-2025-38415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38730" id="CVE-2025-38730" type="cve" title="CVE-2025-38730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39933" id="CVE-2025-39933" type="cve" title="CVE-2025-39933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40133" id="CVE-2025-40133" type="cve" title="CVE-2025-40133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40304" id="CVE-2025-40304" type="cve" title="CVE-2025-40304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40322" id="CVE-2025-40322" type="cve" title="CVE-2025-40322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68811" id="CVE-2025-68811" type="cve" title="CVE-2025-68811"/>
      <reference href="https://bugzilla.redhat.com/2383404" id="2383404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383421" id="2383421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393191" id="2393191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401432" id="2401432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414465" id="2414465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419870" id="2419870" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419902" id="2419902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429116" id="2429116" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2282.html" id="ALSA-2026:2282" type="self" title="ALSA-2026:2282"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.35.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.35.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.35.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">280df66ee0ef25890572cd12793ba06e88f04a716a30847dcb452027d756ba86</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.35.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.35.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.35.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">9cee1ba0c43fa010d76fc1e8429681552dab8881e73dddeba2fe21a3106042cc</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.35.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.35.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.35.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">c4b51489855b3c68d9062f03f6e15521e924166c9518de5655c920fb85625321</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2410</id>
    <title>Important: libsoup3 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-11 15:26:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsoup3 security update</summary>
    <description>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.  

Security Fix(es):  

  * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2410" id="RHSA-2026:2410" type="rhsa" title="RHSA-2026:2410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1761" id="CVE-2026-1761" type="cve" title="CVE-2026-1761"/>
      <reference href="https://bugzilla.redhat.com/2435961" id="2435961" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2410.html" id="ALSA-2026:2410" type="self" title="ALSA-2026:2410"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libsoup3-doc" version="3.6.5" release="3.el10_1.10" epoch="0" arch="noarch" src="libsoup3-3.6.5-3.el10_1.10.src.rpm">
          <filename>libsoup3-doc-3.6.5-3.el10_1.10.noarch.rpm</filename>
          <sum type="sha256">ad2bc992d5d96fd640a751e6486459308c6c3267da593a185bb28175b91e0fbb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2721</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-23 13:33:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)
  * kernel: Linux kernel erofs: Use-After-Free due to device type mismatch (CVE-2025-38172)
  * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
  * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
  * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2721" id="RHSA-2026:2721" type="rhsa" title="RHSA-2026:2721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53034" id="CVE-2023-53034" type="cve" title="CVE-2023-53034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38172" id="CVE-2025-38172" type="cve" title="CVE-2025-38172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40064" id="CVE-2025-40064" type="cve" title="CVE-2025-40064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40141" id="CVE-2025-40141" type="cve" title="CVE-2025-40141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40269" id="CVE-2025-40269" type="cve" title="CVE-2025-40269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68349" id="CVE-2025-68349" type="cve" title="CVE-2025-68349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22998" id="CVE-2026-22998" type="cve" title="CVE-2026-22998"/>
      <reference href="https://bugzilla.redhat.com/2360239" id="2360239" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376072" id="2376072" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406747" id="2406747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414522" id="2414522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419919" id="2419919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424880" id="2424880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432671" id="2432671" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-2721.html" id="ALSA-2026:2721" type="self" title="ALSA-2026:2721"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.38.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.38.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.38.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">517af7fbd5ca1607f8f48c96d5d2cccc4ad19e29a74ec4b4fe7fcd4aefc476bd</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.38.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.38.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.38.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">6f2c7f49668380b9c5ed3d2e005005291eaee54118ae142970ea520111d5647f</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.38.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.38.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.38.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">cc205de66c40eab33435837debe74190966b433eaffaae61dde32854368056fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3033</id>
    <title>Important: munge security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:51:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>munge security update</summary>
    <description>MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.  

Security Fix(es):  

  * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3033" id="RHSA-2026:3033" type="rhsa" title="RHSA-2026:3033"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25506" id="CVE-2026-25506" type="cve" title="CVE-2026-25506"/>
      <reference href="https://bugzilla.redhat.com/2438715" id="2438715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3033.html" id="ALSA-2026:3033" type="self" title="ALSA-2026:3033"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="munge-devel" version="0.5.15" release="11.el10_1" epoch="0" arch="ppc64le" src="munge-0.5.15-11.el10_1.src.rpm">
          <filename>munge-devel-0.5.15-11.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">ce9d270f047f4853b735dfcb3ba54935225b0bee1bbf8b825be7b575d0a41fcf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3068</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-26 10:34:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22853)
  * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)
  * freerdp: FreeRDP: Denial of Service via use after free in ecam_channel_write (CVE-2026-24678)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3068" id="RHSA-2026:3068" type="rhsa" title="RHSA-2026:3068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22853" id="CVE-2026-22853" type="cve" title="CVE-2026-22853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22855" id="CVE-2026-22855" type="cve" title="CVE-2026-22855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22858" id="CVE-2026-22858" type="cve" title="CVE-2026-22858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22859" id="CVE-2026-22859" type="cve" title="CVE-2026-22859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24678" id="CVE-2026-24678" type="cve" title="CVE-2026-24678"/>
      <reference href="https://bugzilla.redhat.com/2429645" id="2429645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429647" id="2429647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429649" id="2429649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429653" id="2429653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438197" id="2438197" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3068.html" id="ALSA-2026:3068" type="self" title="ALSA-2026:3068"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libwinpr-devel" version="3.10.3" release="5.el10_1.2" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.2.src.rpm">
          <filename>libwinpr-devel-3.10.3-5.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">61c59edbacabfeab1c98e106d0e802d8669c2a065b6e5cbdcb7388edd87fefb5</sum>
        </package>
        <package name="freerdp-server" version="3.10.3" release="5.el10_1.2" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.2.src.rpm">
          <filename>freerdp-server-3.10.3-5.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">c871bc84058ba8260358766a07999603bbb006dc14e655f8b1ab4c9a39461773</sum>
        </package>
        <package name="freerdp-devel" version="3.10.3" release="5.el10_1.2" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.2.src.rpm">
          <filename>freerdp-devel-3.10.3-5.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">df571b02a3cb0fcb27782904d308f3f474bd196e195cda18bf74db7527d08e9a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3094</id>
    <title>Important: protobuf security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-24 00:07:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  

Security Fix(es):  

  * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3094" id="RHSA-2026:3094" type="rhsa" title="RHSA-2026:3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0994" id="CVE-2026-0994" type="cve" title="CVE-2026-0994"/>
      <reference href="https://bugzilla.redhat.com/2432398" id="2432398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3094.html" id="ALSA-2026:3094" type="self" title="ALSA-2026:3094"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="protobuf-lite-devel" version="3.19.6" release="15.el10_1" epoch="0" arch="ppc64le" src="protobuf-3.19.6-15.el10_1.src.rpm">
          <filename>protobuf-lite-devel-3.19.6-15.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">3fd7c5653d02eecf4e6718b3fbbc3d6839294a519791923963832ed77a4a841f</sum>
        </package>
        <package name="protobuf-devel" version="3.19.6" release="15.el10_1" epoch="0" arch="ppc64le" src="protobuf-3.19.6-15.el10_1.src.rpm">
          <filename>protobuf-devel-3.19.6-15.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">616642d0b11f4ea0bb2f1517b7266fb53e18c067dbca29fac8a8ddf620cacb26</sum>
        </package>
        <package name="protobuf-compiler" version="3.19.6" release="15.el10_1" epoch="0" arch="ppc64le" src="protobuf-3.19.6-15.el10_1.src.rpm">
          <filename>protobuf-compiler-3.19.6-15.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f906a67ee5aff3741c69fe26b9e71f3fa0b4054058fe00e692bbca48df57330f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3208</id>
    <title>Moderate: 389-ds-base security update</title>
    <issued date="2026-02-24 00:00:00"/>
    <updated date="2026-02-26 10:30:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>389-ds-base security update</summary>
    <description>389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.  

Security Fix(es):  

  * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow (CVE-2025-14905)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3208" id="RHSA-2026:3208" type="rhsa" title="RHSA-2026:3208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14905" id="CVE-2025-14905" type="cve" title="CVE-2025-14905"/>
      <reference href="https://bugzilla.redhat.com/2423624" id="2423624" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3208.html" id="ALSA-2026:3208" type="self" title="ALSA-2026:3208"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="389-ds-base-bdb" version="3.1.3" release="7.el10_1" epoch="0" arch="ppc64le" src="389-ds-base-3.1.3-7.el10_1.src.rpm">
          <filename>389-ds-base-bdb-3.1.3-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">5d6812e97a24e7c7cad867e6bd6c60e21a228311efdfb6072040ec705387effe</sum>
        </package>
        <package name="389-ds-base-devel" version="3.1.3" release="7.el10_1" epoch="0" arch="ppc64le" src="389-ds-base-3.1.3-7.el10_1.src.rpm">
          <filename>389-ds-base-devel-3.1.3-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">642334595bcfb37c46bf62a1acaa10aebfbde8f15b5040d36d129a39e3beac5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3275</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-03-02 13:06:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service (CVE-2025-38206)
  * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)
  * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3275" id="RHSA-2026:3275" type="rhsa" title="RHSA-2026:3275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38206" id="CVE-2025-38206" type="cve" title="CVE-2025-38206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40096" id="CVE-2025-40096" type="cve" title="CVE-2025-40096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40168" id="CVE-2025-40168" type="cve" title="CVE-2025-40168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68800" id="CVE-2025-68800" type="cve" title="CVE-2025-68800"/>
      <reference href="https://bugzilla.redhat.com/2376377" id="2376377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407333" id="2407333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414482" id="2414482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429065" id="2429065" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3275.html" id="ALSA-2026:3275" type="self" title="ALSA-2026:3275"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.39.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.39.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.39.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">015ef748bb32b1035ce4df85ca1a386c2b5ef2842d675a82428c992f14a5360b</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.39.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.39.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.39.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">65be8f70ea584ce5ee3af53c311e42e6885234ebf08dda5838310845b75c3ca4</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.39.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.39.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.39.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">6886c338d86933fd9d254e99c62b3be50cbbcf03ec96415464bc67c50cd09c17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3336</id>
    <title>Important: podman security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 13:31:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>podman security update</summary>
    <description>The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3336" id="RHSA-2026:3336" type="rhsa" title="RHSA-2026:3336"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61728" id="CVE-2025-61728" type="cve" title="CVE-2025-61728"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434431" id="2434431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3336.html" id="ALSA-2026:3336" type="self" title="ALSA-2026:3336"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="podman-tests" version="5.6.0" release="12.el10_1.alma.1" epoch="7" arch="ppc64le" src="podman-5.6.0-12.el10_1.alma.1.src.rpm">
          <filename>podman-tests-5.6.0-12.el10_1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">b2b0a1aebc7470337507ecacfe414620f9f12b9e8828a88347841f2d13fda6eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3476</id>
    <title>Important: udisks2 security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-05 07:48:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>udisks2 security update</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.  

Security Fix(es):  

  * udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API (CVE-2026-26104)
  * udisks: Missing Authorization Check Allows Unprivileged Users to Restore LUKS Headers via udisks D-Bus API (CVE-2026-26103)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3476" id="RHSA-2026:3476" type="rhsa" title="RHSA-2026:3476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26103" id="CVE-2026-26103" type="cve" title="CVE-2026-26103"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26104" id="CVE-2026-26104" type="cve" title="CVE-2026-26104"/>
      <reference href="https://bugzilla.redhat.com/2433717" id="2433717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2433719" id="2433719" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3476.html" id="ALSA-2026:3476" type="self" title="ALSA-2026:3476"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libudisks2-devel" version="2.10.90" release="6.el10_1.1.alma.1" epoch="0" arch="ppc64le" src="udisks2-2.10.90-6.el10_1.1.alma.1.src.rpm">
          <filename>libudisks2-devel-2.10.90-6.el10_1.1.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">0df1c1e6db1419aa50164fa0f4ea4f54bc3ea2c1e0d6488db88f1f603107c59c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3887</id>
    <title>Important: postgresql16 security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-06 13:21:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>postgresql16 security update</summary>
    <description>PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.  

Security Fix(es):  

  * postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code (CVE-2026-2006)
  * postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code (CVE-2026-2004)
  * postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code (CVE-2026-2005)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3887" id="RHSA-2026:3887" type="rhsa" title="RHSA-2026:3887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2004" id="CVE-2026-2004" type="cve" title="CVE-2026-2004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2005" id="CVE-2026-2005" type="cve" title="CVE-2026-2005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2006" id="CVE-2026-2006" type="cve" title="CVE-2026-2006"/>
      <reference href="https://bugzilla.redhat.com/2439324" id="2439324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439325" id="2439325" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439326" id="2439326" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3887.html" id="ALSA-2026:3887" type="self" title="ALSA-2026:3887"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="postgresql-test-rpm-macros" version="16.13" release="1.el10_1" epoch="0" arch="noarch" src="postgresql16-16.13-1.el10_1.src.rpm">
          <filename>postgresql-test-rpm-macros-16.13-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">e76feeb0d1858ecf41f6b5cb34ea1b10f2baece305c0899fb599b357716492c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3939</id>
    <title>Moderate: nfs-utils security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-11 09:35:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nfs-utils security update</summary>
    <description>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.   

Security Fix(es):  

  * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3939" id="RHSA-2026:3939" type="rhsa" title="RHSA-2026:3939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12801" id="CVE-2025-12801" type="cve" title="CVE-2025-12801"/>
      <reference href="https://bugzilla.redhat.com/2413081" id="2413081" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-3939.html" id="ALSA-2026:3939" type="self" title="ALSA-2026:3939"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libnfsidmap-devel" version="2.8.3" release="0.el10_1.3" epoch="1" arch="ppc64le" src="nfs-utils-2.8.3-0.el10_1.3.src.rpm">
          <filename>libnfsidmap-devel-2.8.3-0.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">3f9f16c1777918db4c0ce519dd218c5368ed179fcbe5de89526b020759df433f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4012</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-13 09:41:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting (CVE-2025-38141)
  * kernel: Linux kernel io_uring: Local privilege escalation, information disclosure, or denial of service via use-after-free (CVE-2025-38106)
  * kernel: drm/xe: Make dma-fences compliant with the safe access rules (CVE-2025-38703)
  * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  * kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CVE-2025-39818)
  * kernel: Kernel: Use-after-free in GPIO character device allows privilege escalation or denial of service (CVE-2025-40249)
  * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085)
  * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)
  * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)
  * kernel: Linux kernel: Information disclosure in efivarfs via incorrect error propagation (CVE-2026-23156)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4012" id="RHSA-2026:4012" type="rhsa" title="RHSA-2026:4012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38106" id="CVE-2025-38106" type="cve" title="CVE-2025-38106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38141" id="CVE-2025-38141" type="cve" title="CVE-2025-38141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38703" id="CVE-2025-38703" type="cve" title="CVE-2025-38703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39760" id="CVE-2025-39760" type="cve" title="CVE-2025-39760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39818" id="CVE-2025-39818" type="cve" title="CVE-2025-39818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40249" id="CVE-2025-40249" type="cve" title="CVE-2025-40249"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71085" id="CVE-2025-71085" type="cve" title="CVE-2025-71085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23001" id="CVE-2026-23001" type="cve" title="CVE-2026-23001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23097" id="CVE-2026-23097" type="cve" title="CVE-2026-23097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23156" id="CVE-2026-23156" type="cve" title="CVE-2026-23156"/>
      <reference href="https://bugzilla.redhat.com/2376052" id="2376052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376077" id="2376077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393157" id="2393157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394601" id="2394601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395797" id="2395797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418886" id="2418886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429026" id="2429026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432664" id="2432664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436802" id="2436802" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439951" id="2439951" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4012.html" id="ALSA-2026:4012" type="self" title="ALSA-2026:4012"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.43.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.43.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.43.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">1f4a6e03a6a296c3ea03be448bbe8b59b9c80065f111538ab3ccb98418aeb74f</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.43.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.43.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.43.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">59007f4fbbfdcf74037d050373aef607e6c585b37f3e2e1fa66383d8f7ab5fe0</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.43.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.43.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.43.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f96c7f0f09a99c4b810d12ed3b50deb0de7a6830a6282082d1c169c1b60371b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4162</id>
    <title>Moderate: mysql8.4 security update</title>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-11 09:43:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mysql8.4 security update</summary>
    <description>MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.  

Security Fix(es):  

  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
  * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
  * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
  * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
  * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4162" id="RHSA-2026:4162" type="rhsa" title="RHSA-2026:4162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21936" id="CVE-2026-21936" type="cve" title="CVE-2026-21936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21937" id="CVE-2026-21937" type="cve" title="CVE-2026-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21941" id="CVE-2026-21941" type="cve" title="CVE-2026-21941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21948" id="CVE-2026-21948" type="cve" title="CVE-2026-21948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21964" id="CVE-2026-21964" type="cve" title="CVE-2026-21964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21968" id="CVE-2026-21968" type="cve" title="CVE-2026-21968"/>
      <reference href="https://bugzilla.redhat.com/2431384" id="2431384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431385" id="2431385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431402" id="2431402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431409" id="2431409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431413" id="2431413" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431431" id="2431431" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4162.html" id="ALSA-2026:4162" type="self" title="ALSA-2026:4162"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="mysql8.4-test" version="8.4.8" release="1.el10_1" epoch="0" arch="ppc64le" src="mysql8.4-8.4.8-1.el10_1.src.rpm">
          <filename>mysql8.4-test-8.4.8-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">947ef694d6a035ac5527a1b46515d1a0144eb6d1e37ecd0a4190b030dda9a364</sum>
        </package>
        <package name="mysql8.4-test-data" version="8.4.8" release="1.el10_1" epoch="0" arch="noarch" src="mysql8.4-8.4.8-1.el10_1.src.rpm">
          <filename>mysql8.4-test-data-8.4.8-1.el10_1.noarch.rpm</filename>
          <sum type="sha256">a7d2e5dbb29aab6cd92c703b1768a5b6fc58dbb66692d5f75fb0809936e4b1ba</sum>
        </package>
        <package name="mysql8.4-devel" version="8.4.8" release="1.el10_1" epoch="0" arch="ppc64le" src="mysql8.4-8.4.8-1.el10_1.src.rpm">
          <filename>mysql8.4-devel-8.4.8-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">b42d6d924aeb7b5e831cbdd1d6c855a6284ed3ad4faddff79ba163ecb98c4e99</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4450</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:36:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4450" id="RHSA-2026:4450" type="rhsa" title="RHSA-2026:4450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4450.html" id="ALSA-2026:4450" type="self" title="ALSA-2026:4450"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.115" release="1.el10_1" epoch="0" arch="ppc64le" src="dotnet9.0-9.0.115-1.el10_1.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">f61418b5e378e6500060c7ee39be562c24496cb3cd1f71c4f14db8b165818af5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4451</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:34:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):  

  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4451" id="RHSA-2026:4451" type="rhsa" title="RHSA-2026:4451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4451.html" id="ALSA-2026:4451" type="self" title="ALSA-2026:4451"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.125" release="1.el10_1" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.125-1.el10_1.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">8f3ad7757d4cdaf25706f03d0afb04f684886bfc6d794a5c87412e68bb2e1b03</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4453</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:32:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4453" id="RHSA-2026:4453" type="rhsa" title="RHSA-2026:4453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4453.html" id="ALSA-2026:4453" type="self" title="ALSA-2026:4453"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.104" release="1.el10_1" epoch="0" arch="ppc64le" src="dotnet10.0-10.0.104-1.el10_1.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">34d6a1e53a0b23339f4087bf1ba9e1f6af65a8bff827af8bd06fa141b4abb582</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4629</id>
    <title>Important: libvpx security update</title>
    <issued date="2026-03-16 00:00:00"/>
    <updated date="2026-03-19 12:45:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4629" id="RHSA-2026:4629" type="rhsa" title="RHSA-2026:4629"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4629.html" id="ALSA-2026:4629" type="self" title="ALSA-2026:4629"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libvpx-devel" version="1.14.1" release="6.el10_1" epoch="0" arch="ppc64le" src="libvpx-1.14.1-6.el10_1.src.rpm">
          <filename>libvpx-devel-1.14.1-6.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">4dd89d41a7ef48d318030211ba6f5ae23d785bd09e8fbeef8e2225c61bc0b7f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4705</id>
    <title>Moderate: nginx security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 12:47:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4705" id="RHSA-2026:4705" type="rhsa" title="RHSA-2026:4705"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1642" id="CVE-2026-1642" type="cve" title="CVE-2026-1642"/>
      <reference href="https://bugzilla.redhat.com/2436738" id="2436738" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4705.html" id="ALSA-2026:4705" type="self" title="ALSA-2026:4705"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="nginx-mod-devel" version="1.26.3" release="2.el10_1" epoch="2" arch="ppc64le" src="nginx-1.26.3-2.el10_1.src.rpm">
          <filename>nginx-mod-devel-1.26.3-2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">b049589a8b6a8b9af163839f37385dab9811286be601dde34e8bfff6f89350ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4713</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 14:56:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4713" id="RHSA-2026:4713" type="rhsa" title="RHSA-2026:4713"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4713.html" id="ALSA-2026:4713" type="self" title="ALSA-2026:4713"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-test" version="3.12.12" release="3.el10_1.1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.1.src.rpm">
          <filename>python3-test-3.12.12-3.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">20787f24c3de275ed7fa1e98f9d28b8312d4ce2ad5e6386ef70af85c2c953603</sum>
        </package>
        <package name="python3-debug" version="3.12.12" release="3.el10_1.1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.1.src.rpm">
          <filename>python3-debug-3.12.12-3.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">45263ed681a37832fa128f0cf99e6c73309e3813c6d6459bcba931d81e140e30</sum>
        </package>
        <package name="python3-idle" version="3.12.12" release="3.el10_1.1" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.1.src.rpm">
          <filename>python3-idle-3.12.12-3.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">bd460b9d6335f1361e8e53d710736c0f99f181a90bd7470ce429db6fcb60b640</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4717</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 15:03:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following (CVE-2026-23893)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4717" id="RHSA-2026:4717" type="rhsa" title="RHSA-2026:4717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23893" id="CVE-2026-23893" type="cve" title="CVE-2026-23893"/>
      <reference href="https://bugzilla.redhat.com/2431909" id="2431909" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4717.html" id="ALSA-2026:4717" type="self" title="ALSA-2026:4717"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="opencryptoki-devel" version="3.25.0" release="5.el10_1.2" epoch="0" arch="ppc64le" src="opencryptoki-3.25.0-5.el10_1.2.src.rpm">
          <filename>opencryptoki-devel-3.25.0-5.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">261be6dd0634fa7742008fd1fc38c9fe4031c8360fadee6e080788ad30cd654a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4723</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-17 00:00:00"/>
    <updated date="2026-03-19 14:48:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service (CVE-2026-23010)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4723" id="RHSA-2026:4723" type="rhsa" title="RHSA-2026:4723"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23010" id="CVE-2026-23010" type="cve" title="CVE-2026-23010"/>
      <reference href="https://bugzilla.redhat.com/2432676" id="2432676" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-4723.html" id="ALSA-2026:4723" type="self" title="ALSA-2026:4723"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.45.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.45.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.45.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">3b69cf4d7f2d28766274052c432615ed903b8dd23799e32f7dca1dce5e298908</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.45.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.45.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.45.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">c7708c29b339f3c87d3bb669cb36d7f4c6c4ea8abfd8777e235a2aa94473da51</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.45.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.45.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.45.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">d408daedded559a64c9ce1a01c86dd7da34a83afbc34c5a2df4584feac3562a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5146</id>
    <title>Important: yggdrasil security update</title>
    <issued date="2026-03-19 00:00:00"/>
    <updated date="2026-03-20 07:36:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yggdrasil security update</summary>
    <description>yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker.  

Security Fix(es):  

  * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
  * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
  * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5146" id="RHSA-2026:5146" type="rhsa" title="RHSA-2026:5146"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61726" id="CVE-2025-61726" type="cve" title="CVE-2025-61726"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61729" id="CVE-2025-61729" type="cve" title="CVE-2025-61729"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68121" id="CVE-2025-68121" type="cve" title="CVE-2025-68121"/>
      <reference href="https://bugzilla.redhat.com/2418462" id="2418462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2434432" id="2434432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2437111" id="2437111" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-5146.html" id="ALSA-2026:5146" type="self" title="ALSA-2026:5146"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="yggdrasil-devel" version="0.4.8" release="3.el10_1" epoch="0" arch="ppc64le" src="yggdrasil-0.4.8-3.el10_1.src.rpm">
          <filename>yggdrasil-devel-0.4.8-3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">5dc277835dc764efb66cccce7fee43cb8b439fb59ec1ec15566df584b3142440</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5939</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-03-26 00:00:00"/>
    <updated date="2026-03-27 10:28:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5939" id="RHSA-2026:5939" type="rhsa" title="RHSA-2026:5939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26955" id="CVE-2026-26955" type="cve" title="CVE-2026-26955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26965" id="CVE-2026-26965" type="cve" title="CVE-2026-26965"/>
      <reference href="https://bugzilla.redhat.com/2442959" id="2442959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443132" id="2443132" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-5939.html" id="ALSA-2026:5939" type="self" title="ALSA-2026:5939"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libwinpr-devel" version="3.10.3" release="5.el10_1.3" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.3.src.rpm">
          <filename>libwinpr-devel-3.10.3-5.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">61aa91dfaa8b831ef1aae0f13933314b1a3a9e251b03ed4da572e06617aa2e28</sum>
        </package>
        <package name="freerdp-devel" version="3.10.3" release="5.el10_1.3" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.3.src.rpm">
          <filename>freerdp-devel-3.10.3-5.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">6889421fa459aaec9d7c878f7f2edb37f90ecef94329d65bfb84c9370afceec6</sum>
        </package>
        <package name="freerdp-server" version="3.10.3" release="5.el10_1.3" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.3.src.rpm">
          <filename>freerdp-server-3.10.3-5.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">b88307ff70c57a931303efc8c9bcbe1509319827c1f9a5ef1cfd63c05243d5d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6053</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-03 09:02:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)
  * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6053" id="RHSA-2026:6053" type="rhsa" title="RHSA-2026:6053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71238" id="CVE-2025-71238" type="cve" title="CVE-2025-71238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23231" id="CVE-2026-23231" type="cve" title="CVE-2026-23231"/>
      <reference href="https://bugzilla.redhat.com/2444376" id="2444376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444398" id="2444398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6053.html" id="ALSA-2026:6053" type="self" title="ALSA-2026:6053"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.47.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.47.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.47.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">3b658aeecaaa6bedf0c1dfb5c4729b8ec03f433b767ed82d8e985014627c3c60</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.47.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.47.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.47.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">5a0650efae2b8adacccb542a2d621e8476ddb6956b6abba86b103ef6fd8a51af</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.47.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.47.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.47.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">7779025e022b8779a10122ca84cc9a91422723c5efc5acf0e384a6df4087fcfd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6256</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 09:23:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6256" id="RHSA-2026:6256" type="rhsa" title="RHSA-2026:6256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6256.html" id="ALSA-2026:6256" type="self" title="ALSA-2026:6256"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="python3-debug" version="3.12.12" release="3.el10_1.2" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.2.src.rpm">
          <filename>python3-debug-3.12.12-3.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">510f02dca0f114c2be33310e2fab66575d174fd6790331964c71b6130bcda713</sum>
        </package>
        <package name="python3-test" version="3.12.12" release="3.el10_1.2" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.2.src.rpm">
          <filename>python3-test-3.12.12-3.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">80518d1f856a16cf4a5039ded77b2814a70c83c40a4a6cc5e6f60f885ebff49a</sum>
        </package>
        <package name="python3-idle" version="3.12.12" release="3.el10_1.2" epoch="0" arch="ppc64le" src="python3.12-3.12.12-3.el10_1.2.src.rpm">
          <filename>python3-idle-3.12.12-3.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">fc1f63c13ffc6de0e9bd9d00a78733c515a86730b4ea7a0d4ade8d5d097e2164</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6259</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-03 09:41:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6259" id="RHSA-2026:6259" type="rhsa" title="RHSA-2026:6259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2922" id="CVE-2026-2922" type="cve" title="CVE-2026-2922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447500" id="2447500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6259.html" id="ALSA-2026:6259" type="self" title="ALSA-2026:6259"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.24.11" release="3.el10_1" epoch="0" arch="ppc64le" src="gstreamer1-plugins-bad-free-1.24.11-3.el10_1.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.24.11-3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">fe4dc4e6b6d0d41208513b7463686c0015f5fb814aaac345a7fa1f2a462cf2a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6631</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-08 20:50:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6631" id="RHSA-2026:6631" type="rhsa" title="RHSA-2026:6631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15270" id="CVE-2025-15270" type="cve" title="CVE-2025-15270"/>
      <reference href="https://bugzilla.redhat.com/2426434" id="2426434" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6631.html" id="ALSA-2026:6631" type="self" title="ALSA-2026:6631"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="fontforge" version="20230101" release="15.el10_1" epoch="0" arch="ppc64le" src="fontforge-20230101-15.el10_1.src.rpm">
          <filename>fontforge-20230101-15.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">148af090e33bbd1904a1347a8948a7491d02656a70c20791e777daea61cb3c88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6632</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-10 16:32:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service (CVE-2025-38109)
  * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
  * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
  * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6632" id="RHSA-2026:6632" type="rhsa" title="RHSA-2026:6632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38109" id="CVE-2025-38109" type="cve" title="CVE-2025-38109"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23144" id="CVE-2026-23144" type="cve" title="CVE-2026-23144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23171" id="CVE-2026-23171" type="cve" title="CVE-2026-23171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23191" id="CVE-2026-23191" type="cve" title="CVE-2026-23191"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23193" id="CVE-2026-23193" type="cve" title="CVE-2026-23193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23209" id="CVE-2026-23209" type="cve" title="CVE-2026-23209"/>
      <reference href="https://bugzilla.redhat.com/2376101" id="2376101" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439872" id="2439872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439886" id="2439886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439887" id="2439887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439900" id="2439900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439947" id="2439947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6632.html" id="ALSA-2026:6632" type="self" title="ALSA-2026:6632"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libperf" version="6.12.0" release="124.49.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.49.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.49.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">0ebc385ce026685f4049abb996cf283947fc6072284c1cb269801124e5333607</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.49.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.49.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.49.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">261ec60c912772ca90a821b11502f9346c08d62eefc8929dc59bf8177123ebbe</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.49.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.49.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.49.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">d13995dbfe0f3c6f3a7ab6bc2bafb577a7790d484a8369c7a7c18f5184ebc612</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6799</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 20:01:55"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)
  * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)
  * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)
  * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)
  * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)
  * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)
  * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)
  * freerdp: FreeRDP has a Heap-buffer-overflow in audio_formats_free (CVE-2026-24682)
  * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)
  * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)
  * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)
  * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6799" id="RHSA-2026:6799" type="rhsa" title="RHSA-2026:6799"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22852" id="CVE-2026-22852" type="cve" title="CVE-2026-22852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22854" id="CVE-2026-22854" type="cve" title="CVE-2026-22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22856" id="CVE-2026-22856" type="cve" title="CVE-2026-22856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23732" id="CVE-2026-23732" type="cve" title="CVE-2026-23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23948" id="CVE-2026-23948" type="cve" title="CVE-2026-23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24491" id="CVE-2026-24491" type="cve" title="CVE-2026-24491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24675" id="CVE-2026-24675" type="cve" title="CVE-2026-24675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24676" id="CVE-2026-24676" type="cve" title="CVE-2026-24676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24679" id="CVE-2026-24679" type="cve" title="CVE-2026-24679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24681" id="CVE-2026-24681" type="cve" title="CVE-2026-24681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24682" id="CVE-2026-24682" type="cve" title="CVE-2026-24682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24683" id="CVE-2026-24683" type="cve" title="CVE-2026-24683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24684" id="CVE-2026-24684" type="cve" title="CVE-2026-24684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31806" id="CVE-2026-31806" type="cve" title="CVE-2026-31806"/>
      <reference href="https://bugzilla.redhat.com/2429650" id="2429650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429652" id="2429652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429654" id="2429654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430881" id="2430881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438201" id="2438201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438202" id="2438202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438207" id="2438207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438208" id="2438208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438210" id="2438210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438212" id="2438212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438216" id="2438216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438217" id="2438217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438221" id="2438221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447376" id="2447376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6799.html" id="ALSA-2026:6799" type="self" title="ALSA-2026:6799"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libwinpr-devel" version="3.10.3" release="5.el10_1.5" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.5.src.rpm">
          <filename>libwinpr-devel-3.10.3-5.el10_1.5.ppc64le.rpm</filename>
          <sum type="sha256">b9d3d25ed65a9b03dfa04b99c6ce9944a300ba5c570cd734b60574ea2dbbf8c5</sum>
        </package>
        <package name="freerdp-devel" version="3.10.3" release="5.el10_1.5" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.5.src.rpm">
          <filename>freerdp-devel-3.10.3-5.el10_1.5.ppc64le.rpm</filename>
          <sum type="sha256">cc62a6e0dfd4d437e5507dd7fc503b7af19ace6c7603c6966bb92b8bd887f3bf</sum>
        </package>
        <package name="freerdp-server" version="3.10.3" release="5.el10_1.5" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.5.src.rpm">
          <filename>freerdp-server-3.10.3-5.el10_1.5.ppc64le.rpm</filename>
          <sum type="sha256">e2a0bdf22545ea09db7a530828f106abdb21ae1b6336e80b42a668f65196f56b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6817</id>
    <title>Important: capstone security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-15 07:33:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>capstone security update</summary>
    <description>Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.  

Security Fix(es):  

  * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
  * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6817" id="RHSA-2026:6817" type="rhsa" title="RHSA-2026:6817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-67873" id="CVE-2025-67873" type="cve" title="CVE-2025-67873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68114" id="CVE-2025-68114" type="cve" title="CVE-2025-68114"/>
      <reference href="https://bugzilla.redhat.com/2423416" id="2423416" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2423419" id="2423419" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6817.html" id="ALSA-2026:6817" type="self" title="ALSA-2026:6817"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="capstone-java" version="5.0.1" release="7.el10_1" epoch="0" arch="noarch" src="capstone-5.0.1-7.el10_1.src.rpm">
          <filename>capstone-java-5.0.1-7.el10_1.noarch.rpm</filename>
          <sum type="sha256">36251294e35a6e0b2ef616b0cf22e06128bc4128fe6a420826479315ae81cd62</sum>
        </package>
        <package name="capstone-devel" version="5.0.1" release="7.el10_1" epoch="0" arch="ppc64le" src="capstone-5.0.1-7.el10_1.src.rpm">
          <filename>capstone-devel-5.0.1-7.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">ca13e3927b2851aaf0fb25975d13130069367fff058308a4904011886a5c1342</sum>
        </package>
        <package name="python3-capstone" version="5.0.1" release="7.el10_1" epoch="0" arch="noarch" src="capstone-5.0.1-7.el10_1.src.rpm">
          <filename>python3-capstone-5.0.1-7.el10_1.noarch.rpm</filename>
          <sum type="sha256">daba3469816d9404c9f5c2942c47365e3484d67ef717e1142b0e4f14ab75451e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6906</id>
    <title>Important: nginx security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 10:53:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nginx security update</summary>
    <description>nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.   

Security Fix(es):  

  * nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files (CVE-2026-32647)
  * NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module (CVE-2026-27654)
  * NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file (CVE-2026-27784)
  * NGINX: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled (CVE-2026-27651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6906" id="RHSA-2026:6906" type="rhsa" title="RHSA-2026:6906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27651" id="CVE-2026-27651" type="cve" title="CVE-2026-27651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27654" id="CVE-2026-27654" type="cve" title="CVE-2026-27654"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27784" id="CVE-2026-27784" type="cve" title="CVE-2026-27784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32647" id="CVE-2026-32647" type="cve" title="CVE-2026-32647"/>
      <reference href="https://bugzilla.redhat.com/2449598" id="2449598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450776" id="2450776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450785" id="2450785" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2450791" id="2450791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-6906.html" id="ALSA-2026:6906" type="self" title="ALSA-2026:6906"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="nginx-mod-devel" version="1.26.3" release="2.el10_1.1" epoch="2" arch="ppc64le" src="nginx-1.26.3-2.el10_1.1.src.rpm">
          <filename>nginx-mod-devel-1.26.3-2.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">331d8fbe9b466814a74348eaaa6c1b55bca43818dfacb73bf6bdd00d19610d1f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7081</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2026-04-08 00:00:00"/>
    <updated date="2026-04-09 01:59:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7081" id="RHSA-2026:7081" type="rhsa" title="RHSA-2026:7081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52356" id="CVE-2023-52356" type="cve" title="CVE-2023-52356"/>
      <reference href="https://bugzilla.redhat.com/2251344" id="2251344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-7081.html" id="ALSA-2026:7081" type="self" title="ALSA-2026:7081"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="libtiff-tools" version="4.6.0" release="6.el10_1.2" epoch="0" arch="ppc64le" src="libtiff-4.6.0-6.el10_1.2.src.rpm">
          <filename>libtiff-tools-4.6.0-6.el10_1.2.ppc64le.rpm</filename>
          <sum type="sha256">edd8326b5a588a10add182d749f7876bae975bf96431e0c91e2550de8b21e655</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7342</id>
    <title>Important: kea security update</title>
    <issued date="2026-04-09 00:00:00"/>
    <updated date="2026-04-15 07:38:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kea security update</summary>
    <description>DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon.  

Security Fix(es):  

  * Kea: Kea: Denial of Service via maliciously crafted message (CVE-2026-3608)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7342" id="RHSA-2026:7342" type="rhsa" title="RHSA-2026:7342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3608" id="CVE-2026-3608" type="cve" title="CVE-2026-3608"/>
      <reference href="https://bugzilla.redhat.com/2451139" id="2451139" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-7342.html" id="ALSA-2026:7342" type="self" title="ALSA-2026:7342"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kea-keama" version="3.0.1" release="3.el10_1" epoch="0" arch="ppc64le" src="kea-3.0.1-3.el10_1.src.rpm">
          <filename>kea-keama-3.0.1-3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">6165cee19300c3ea0a3fa0e155203b7c53678a5bf19fc067b8e2bbdeb82edd2b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7666</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 07:43:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7666" id="RHSA-2026:7666" type="rhsa" title="RHSA-2026:7666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-7666.html" id="ALSA-2026:7666" type="self" title="ALSA-2026:7666"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="nghttp2" version="1.64.0" release="2.el10_1.1" epoch="0" arch="ppc64le" src="nghttp2-1.64.0-2.el10_1.1.src.rpm">
          <filename>nghttp2-1.64.0-2.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">28ca739eee2ee2513450dd67731ffed9fbefa9759d07a7cd68b62ce2a729c7e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7682</id>
    <title>Important: openexr security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-14 12:32:43"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>openexr security update</summary>
    <description>OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  

Security Fix(es):  

  * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7682" id="RHSA-2026:7682" type="rhsa" title="RHSA-2026:7682"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27622" id="CVE-2026-27622" type="cve" title="CVE-2026-27622"/>
      <reference href="https://bugzilla.redhat.com/2444251" id="2444251" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-7682.html" id="ALSA-2026:7682" type="self" title="ALSA-2026:7682"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="openexr-devel" version="3.1.10" release="8.el10_1.1" epoch="0" arch="ppc64le" src="openexr-3.1.10-8.el10_1.1.src.rpm">
          <filename>openexr-devel-3.1.10-8.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">f0a400755d3e2b8ca6ee694d38115b30ebcc36c4783b07fbb6847834ab8d910c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8312</id>
    <title>Important: bind security update</title>
    <issued date="2026-04-15 00:00:00"/>
    <updated date="2026-04-16 10:09:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8312" id="RHSA-2026:8312" type="rhsa" title="RHSA-2026:8312"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-8312.html" id="ALSA-2026:8312" type="self" title="ALSA-2026:8312"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="bind-doc" version="9.18.33" release="10.el10_1.3" epoch="32" arch="noarch" src="bind-9.18.33-10.el10_1.3.src.rpm">
          <filename>bind-doc-9.18.33-10.el10_1.3.noarch.rpm</filename>
          <sum type="sha256">3549e4b4978409acd2e511cadcea55a443f39a9696adf0cf561c23384f896ffa</sum>
        </package>
        <package name="bind-devel" version="9.18.33" release="10.el10_1.3" epoch="32" arch="ppc64le" src="bind-9.18.33-10.el10_1.3.src.rpm">
          <filename>bind-devel-9.18.33-10.el10_1.3.ppc64le.rpm</filename>
          <sum type="sha256">f6c31ea97907ac96325e34434c0669e093590c6553a9819b77e9755c03af2525</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8458</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 09:35:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8458" id="RHSA-2026:8458" type="rhsa" title="RHSA-2026:8458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33983" id="CVE-2026-33983" type="cve" title="CVE-2026-33983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33984" id="CVE-2026-33984" type="cve" title="CVE-2026-33984"/>
      <reference href="https://bugzilla.redhat.com/2453219" id="2453219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453220" id="2453220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-8458.html" id="ALSA-2026:8458" type="self" title="ALSA-2026:8458"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="freerdp-server" version="3.10.3" release="5.el10_1.6" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.6.src.rpm">
          <filename>freerdp-server-3.10.3-5.el10_1.6.ppc64le.rpm</filename>
          <sum type="sha256">0680b8bbec9c2754c4e4e8b37ce4687560f94ff170e833e39989c6c57c490dc0</sum>
        </package>
        <package name="libwinpr-devel" version="3.10.3" release="5.el10_1.6" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.6.src.rpm">
          <filename>libwinpr-devel-3.10.3-5.el10_1.6.ppc64le.rpm</filename>
          <sum type="sha256">4e826cf0060c21611d96bd0c8982dedafa23c770e1a64928730905872a6dbca3</sum>
        </package>
        <package name="freerdp-devel" version="3.10.3" release="5.el10_1.6" epoch="2" arch="ppc64le" src="freerdp-3.10.3-5.el10_1.6.src.rpm">
          <filename>freerdp-devel-3.10.3-5.el10_1.6.ppc64le.rpm</filename>
          <sum type="sha256">baf27dad4d3926feb46e18176229c39974686508e25db413a839af4abe8e2682</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8470</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 09:34:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.126 and .NET Runtime 8.0.26.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8470" id="RHSA-2026:8470" type="rhsa" title="RHSA-2026:8470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-8470.html" id="ALSA-2026:8470" type="self" title="ALSA-2026:8470"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.126" release="1.el10_1" epoch="0" arch="ppc64le" src="dotnet8.0-8.0.126-1.el10_1.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">bfdeeb27a1e567b7bf7eb801bb70b3f72dc64a6e927ff057f26a5f8249e4e4e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8472</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-17 09:30:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8472" id="RHSA-2026:8472" type="rhsa" title="RHSA-2026:8472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-8472.html" id="ALSA-2026:8472" type="self" title="ALSA-2026:8472"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.116" release="1.el10_1" epoch="0" arch="ppc64le" src="dotnet9.0-9.0.116-1.el10_1.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">d66990484649f9c8748b97c75b76b7730b7e33dce89e86eb5771d1fb1a888b0a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8858</id>
    <title>Important: giflib security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 08:28:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8858" id="RHSA-2026:8858" type="rhsa" title="RHSA-2026:8858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-8858.html" id="ALSA-2026:8858" type="self" title="ALSA-2026:8858"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="giflib-devel" version="5.2.1" release="22.el10_1.1" epoch="0" arch="ppc64le" src="giflib-5.2.1-22.el10_1.1.src.rpm">
          <filename>giflib-devel-5.2.1-22.el10_1.1.ppc64le.rpm</filename>
          <sum type="sha256">56ee825b4ab0d0b61f3fefdf02dacac3c73ff471c5f20d8f5a8bed3818b9eb3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9264</id>
    <title>Important: kernel security update</title>
    <issued date="2026-04-21 00:00:00"/>
    <updated date="2026-04-24 10:07:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9264" id="RHSA-2026:9264" type="rhsa" title="RHSA-2026:9264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39766" id="CVE-2025-39766" type="cve" title="CVE-2025-39766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://bugzilla.redhat.com/2394648" id="2394648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-9264.html" id="ALSA-2026:9264" type="self" title="ALSA-2026:9264"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.52.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.1.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.52.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">01d67b83144e7d5e3c7640a75d5a3ed47c5c590244fd15625497ec79a973e190</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.52.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.1.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.52.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">ae76d9f099e28bbd52de687a40d7af9383b1f6ef7dfce8da2e2c2fea11c9ce8e</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.52.1.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.1.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.52.1.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">fd9e92b00d53709ee3b30b63cb16085bcd51332d42563770f28ea7b628ae6177</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9666</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-24 10:01:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  

Security Fix(es):  

  * wireshark: Buffer Over-read in Wireshark (CVE-2026-3203)
  * wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark (CVE-2026-3201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9666" id="RHSA-2026:9666" type="rhsa" title="RHSA-2026:9666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3201" id="CVE-2026-3201" type="cve" title="CVE-2026-3201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3203" id="CVE-2026-3203" type="cve" title="CVE-2026-3203"/>
      <reference href="https://bugzilla.redhat.com/2442639" id="2442639" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442641" id="2442641" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-9666.html" id="ALSA-2026:9666" type="self" title="ALSA-2026:9666"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="wireshark-devel" version="4.4.2" release="4.el10_1.4" epoch="1" arch="ppc64le" src="wireshark-4.4.2-4.el10_1.4.src.rpm">
          <filename>wireshark-devel-4.4.2-4.el10_1.4.ppc64le.rpm</filename>
          <sum type="sha256">d97a3ac7de81e3fd357498a8041b0a77b239c653e661f0abb766b8a308b9ca84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9689</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:22:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


Bug Fix(es):  

  * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9689" id="RHSA-2026:9689" type="rhsa" title="RHSA-2026:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-9689.html" id="ALSA-2026:9689" type="self" title="ALSA-2026:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">21dcc7b758d3e86a42473e6df6e0c68a0ee49385a5009a22c20a75dce8446395</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">288098d61348a841349b0c56fc686fa1dd3859498379b444bb4dbbc4efa77ffb</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">2c3a0bd672376a02eaca1a2a71c67590c88d336760bff33a46d5aa7ad058480c</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">301298356bff800db5627a4276a77973c461a8f16ad38e66beea16ec03dd4e89</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">3b59f92224acb43e484a429c58b4c9f4029a9a28743a3b55c6474a77c634c748</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">85e73056e2344524db916094b2218091d4570c1c9405a6a6f9d700b1e593e5f5</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">8cbc2995a85358a7baaabcf8b7f460bf498f3be177ab20c6a76bb3888c5a743f</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">aae3958643eff4e60f00f8e0bcd190f3a86b7ee6ed52b937ffde957b98a55b6f</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ab37a42bf3aad45b9427eeec8967af3eb4f60b0984590bdfea513be410446dec</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">b07f20277ce6fcdda4b1b46465a03043f4343b8f5cd30d46424d53c667c9cab5</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">b7c1248c64d082735fa45915bd3821f1473a3d5f5c827730b4ddca32750fd552</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">cb3723d07220006289fbc4a2444de4386367268884607787d71547a2ef2d69db</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">ce1dd6047d0f154d0df8a4134eaf0104af1a74e1e7a0c107bfd4dbb596430fb1</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.11.0.10" release="2.el10_2.alma.1" epoch="1" arch="ppc64le" src="java-21-openjdk-21.0.11.0.10-2.el10_2.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.11.0.10-2.el10_2.alma.1.ppc64le.rpm</filename>
          <sum type="sha256">eea4e1a3ea7ac24e9b0ef81446e90d8e47884fc92a7dbd7abffb3607d728fdf1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9693</id>
    <title>Important: java-25-openjdk security update</title>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-24 09:55:42"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-25-openjdk security update</summary>
    <description>The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improved Arena allocations (CVE-2026-22008)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


This release also updates a number of third-party libraries included in the JDK. The libraries themselves are affected by the following CVEs, but this is not a statement that the JDK itself is affected:  

  * giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
  * libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
  * libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)


Bug Fix(es):  

  * When copying files, OpenJDK 25 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 25 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169939, AlmaLinux-169937)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9693" id="RHSA-2026:9693" type="rhsa" title="RHSA-2026:9693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22008" id="CVE-2026-22008" type="cve" title="CVE-2026-22008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26740" id="CVE-2026-26740" type="cve" title="CVE-2026-26740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33416" id="CVE-2026-33416" type="cve" title="CVE-2026-33416"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33636" id="CVE-2026-33636" type="cve" title="CVE-2026-33636"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-9693.html" id="ALSA-2026:9693" type="self" title="ALSA-2026:9693"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="java-25-openjdk-crypto-adapter-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">3214a0ce72e5028ed972db2ee3b6b41e6740ab6bb209fed620920a7e6439b5fe</sum>
        </package>
        <package name="java-25-openjdk-jmods-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">57f9dd7b445903f1ec581a7fe44ac2c2816f1de7243d14bf29bb29a3c284667f</sum>
        </package>
        <package name="java-25-openjdk-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">5b017c9fc52ace97e844dd5db2c65fac6c9077699fdee990ccae7aab88f0e883</sum>
        </package>
        <package name="java-25-openjdk-jmods-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-jmods-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">6d822ab6c75966e10df96334c68c7bce4d45e56e5c9f42235499f2f53c150275</sum>
        </package>
        <package name="java-25-openjdk-devel-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-devel-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">839756ca97ac51dd6614863d94418af3d22e788cbd0657e9e6b805fc6530ded2</sum>
        </package>
        <package name="java-25-openjdk-src-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-src-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">8755bf1e9eeac85b158d800c0b007fdc530ac44c61222465ffacde5ace8d87a4</sum>
        </package>
        <package name="java-25-openjdk-crypto-adapter-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">92a777fa62d9a6d7be2e67c2ca6ce96df5ed9aab78332100a796e5f098cf5682</sum>
        </package>
        <package name="java-25-openjdk-devel-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">9e25280d23939d7fe7589374e2a0056c6f7c0a38d7151cb6c686f0fdfc4feade</sum>
        </package>
        <package name="java-25-openjdk-src-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-src-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">aff54590984639352615489e155568860457272ed3fa7cf3d79ca60085f0200d</sum>
        </package>
        <package name="java-25-openjdk-demo-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">ba4b1a73f2e1cbf9f2c3cc64716fe51679cc526921bf1c72f9a42a7f45ba8dc5</sum>
        </package>
        <package name="java-25-openjdk-static-libs-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">c60038f4a278ded2232632877253725f0d721138c85cd2288d28f38c64986472</sum>
        </package>
        <package name="java-25-openjdk-headless-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">cdaafc111eefed4dcab801c6ee966e7d3278d317d2a649016ac44912c38cf455</sum>
        </package>
        <package name="java-25-openjdk-slowdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-slowdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">dca8cb5d5c69c775563d13f42fba979da13b5e4c9b9e91b17edf6b5f15d19d63</sum>
        </package>
        <package name="java-25-openjdk-headless-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-headless-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">ecc19e926d41704a3182a2e57ccef98d330a0c1505c3b1ee0adeffcc43b199b2</sum>
        </package>
        <package name="java-25-openjdk-demo-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-demo-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">eeab9cc017416a30bd06e2e9985d89536e50b0ebab281efd95a8aac0505c7a1f</sum>
        </package>
        <package name="java-25-openjdk-static-libs-fastdebug" version="25.0.3.0.9" release="1.el10_2" epoch="1" arch="ppc64le" src="java-25-openjdk-25.0.3.0.9-1.el10_2.src.rpm">
          <filename>java-25-openjdk-static-libs-fastdebug-25.0.3.0.9-1.el10_2.ppc64le.rpm</filename>
          <sum type="sha256">eff275b55462c595cab736371f9becef7ba43b569e2266a07c8394da84508e38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A003</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 19:17:27"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A003.html" id="ALSA-2026:A003" type="self" title="ALSA-2026:A003"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">4d607a6f54fd0bcc86381efa2b5ff7bab1414dbee274204c527f9120b9471b9e</sum>
        </package>
        <package name="kernel-cross-headers" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">b054f1d61c301e23d5692952d27352dca83ad1b3ab0d47957db149d2e7aed9fe</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.52.2.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.52.2.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.52.2.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">e52e20b2d3ba9740527a00c531f9c5a0f3ec14a3bee9a3d02ef99efb6c4abfef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A006</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-08 00:00:00"/>
    <updated date="2026-05-08 14:38:25"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-43284" id="CVE-2026-43284" type="cve" title="CVE-2026-43284"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2467771" id="show_bug.cgi?id=2467771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/10/ALSA-2026-A006.html" id="ALSA-2026:A006" type="self" title="ALSA-2026:A006"/>
    </references>
    <pkglist>
      <collection short="almalinux-10-for-ppc64le-crb-rpms__10_0_default">
        <name>almalinux-10-for-ppc64le-crb-rpms__10_0_default</name>
        <package name="kernel-cross-headers" version="6.12.0" release="124.55.3.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.55.3.el10_1.src.rpm">
          <filename>kernel-cross-headers-6.12.0-124.55.3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">32b34321b27e0ce3f451b9b33dd5305372256e383807e5c77930041c1b2952c5</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="6.12.0" release="124.55.3.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.55.3.el10_1.src.rpm">
          <filename>kernel-tools-libs-devel-6.12.0-124.55.3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">54c9d75caaad263e8f1c95891f49dac41989494bbefdc83fe587bb8dc4695deb</sum>
        </package>
        <package name="libperf" version="6.12.0" release="124.55.3.el10_1" epoch="0" arch="ppc64le" src="kernel-6.12.0-124.55.3.el10_1.src.rpm">
          <filename>libperf-6.12.0-124.55.3.el10_1.ppc64le.rpm</filename>
          <sum type="sha256">dfe620ede565ac0638c04873130577c4cd76351bfa32b3fe9a5a69165210b0b4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>